CLEANSTART-2026-TZ20094: snappy-java through 1

Q: What does an attacker need to exploit this issue?

The CVSS vector indicates that exploitation is network-accessible, has low attack complexity, requires no privileges, and does not require user interaction.

Q: What security impact is indicated?

The reported impact is limited to integrity and availability, both rated low. No confidentiality impact is indicated, and the scope is unchanged.

Q: Which deployments should be checked first?

Verify installations of cleanstart/rundeck and cleanstart/solr that include snappy-java. The affected range is reported as “through 1”; the provided data does not identify a fixed version.

Published Nov 13, 2026

Updated

CVE-2026-93451 affects multiple packages. snappy-java through 1. See references for individual vulnerability details.

Affected Software

2 affected componentsFixes available

cleanstart/rundeck<6.0.1-r11

6.0.1-r11

cleanstart/solr<9.11.0-r0

9.11.0-r0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/rundeck to a version that resolves this vulnerability.
Fixed in 6.0.1-r11
Upgrade
Upgrade cleanstart/solr to a version that resolves this vulnerability.
Fixed in 9.11.0-r0

Event History

Nov 13, 2026

Advisory Published

via OSV·12:37 AM

Data Sourced

via OSV·12:37 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-93451

Frequently Asked Questions

What does an attacker need to exploit this issue?