CLEANSTART-2026-UC17626: Objenesis before 3

Q: What level of access does an attacker need to exploit this issue?

The vector indicates local access, low privileges, high attack complexity, and no user interaction. It is therefore not described as remotely exploitable through the network.

Q: What is the expected security impact if exploitation succeeds?

The reported impact is low for confidentiality, integrity, and availability. The scope is unchanged.

Published Nov 13, 2026

Updated

CVE-2026-116486 affects multiple packages. Objenesis before 3. See references for individual vulnerability details.

Affected Software

2 affected componentsFixes available

cleanstart/wso2am<4.7.0-r5

4.7.0-r5

cleanstart/wso2mi<4.6.0-r11

4.6.0-r11

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/wso2am to a version that resolves this vulnerability.
Fixed in 4.7.0-r5
Upgrade
Upgrade cleanstart/wso2mi to a version that resolves this vulnerability.
Fixed in 4.6.0-r11

Event History

Nov 13, 2026

Advisory Published

via OSV·12:36 AM

Data Sourced

via OSV·12:36 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-116486

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?