CLEANSTART-2026-QM10235: netty-tcnative 2
Published Nov 13, 2026
·Updated
CVE-2026-116540 affects multiple packages. netty-tcnative 2. See references for individual vulnerability details.
Affected Software
2 affected componentsFixes available
cleanstart/wso2am<4.7.0-r5
4.7.0-r5
cleanstart/wso2mi<4.6.0-r10
4.6.0-r10
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/wso2amto a version that resolves this vulnerability.Fixed in 4.7.0-r5 - Upgrade
Upgrade
cleanstart/wso2mito a version that resolves this vulnerability.Fixed in 4.6.0-r10
Event History
Nov 13, 2026
Advisory Published
via OSV·12:36 AM
Data Sourced
via OSV·12:36 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What does an attacker need to attempt exploitation?
The CVSS vector indicates network access is required, while no privileges or user interaction are required. Exploitation is rated as high complexity.
2
What is the expected security impact if exploitation succeeds?
The reported impact is limited to availability, with a high availability impact. No confidentiality or integrity impact is indicated.