CLEANSTART-2026-OL55711: Netty netty-tcnative before 2

Q: Can this be exploited remotely without authentication or user interaction?

Yes. The vulnerability is rated with network attack vector, low attack complexity, no privileges required, and no user interaction required.

Q: What is the expected security impact?

The reported impact is limited to integrity, rated low. No confidentiality or availability impact is reported.

Q: Which deployed software should be reviewed for exposure?

Review cleanstart/wso2am, cleanstart/wso2mi, and cleanstart/solr deployments that include Netty netty-tcnative. The affected range is versions before 2.

Published Nov 13, 2026

Updated

CVE-2026-116542 affects multiple packages. Netty netty-tcnative before 2. See references for individual vulnerability details.

Affected Software

3 affected componentsFixes available

cleanstart/wso2am<4.7.0-r5

4.7.0-r5

cleanstart/wso2mi<4.6.0-r10

4.6.0-r10

cleanstart/solr<9.11.0-r0

9.11.0-r0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/wso2am to a version that resolves this vulnerability.
Fixed in 4.7.0-r5
Upgrade
Upgrade cleanstart/wso2mi to a version that resolves this vulnerability.
Fixed in 4.6.0-r10
Upgrade
Upgrade cleanstart/solr to a version that resolves this vulnerability.
Fixed in 9.11.0-r0

Event History

Nov 13, 2026

Advisory Published

via OSV·12:37 AM

Data Sourced

via OSV·12:37 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-116542

Frequently Asked Questions

Can this be exploited remotely without authentication or user interaction?