CVE-2026-94002

Published 30 September 2026 · tracked since 30 September 2026

Description

Possible memory exhaustion in SFTP clients (DefaultSftpClient) in component sshd-sftp in Apache MINA SSHD versions 0.9.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5.Apache MINA SSHD is a Java library for client-side and server-side SSH. The sshd-sftp component provides support for SFTP.The SFTP cl

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-94029 MEDIUM 6.5
• CVE-2026-94052 CRITICAL 9.1
• CVE-2026-94053 CRITICAL 9.1
• CVE-2026-77185 CRITICAL 9.1
• CVE-2026-93994 HIGH 8.1
• CVE-2026-93995 MEDIUM 6.5
• CVE-2026-93996 MEDIUM 6.5
• CVE-2026-75098 HIGH 7.5
• CVE-2026-97347 HIGH 7.2
• CVE-2026-97150 HIGH 7.2

→ Open the live CVE board · all tools