CLEANSTART-2026-VU15187: Netty netty-tcnative before 2
Published Nov 13, 2026
·Updated
CVE-2026-116541 affects multiple packages. Netty netty-tcnative before 2. See references for individual vulnerability details.
Affected Software
3 affected componentsFixes available
cleanstart/wso2am<4.7.0-r5
4.7.0-r5
cleanstart/wso2mi<4.6.0-r10
4.6.0-r10
cleanstart/solr<9.11.0-r0
9.11.0-r0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/wso2amto a version that resolves this vulnerability.Fixed in 4.7.0-r5 - Upgrade
Upgrade
cleanstart/wso2mito a version that resolves this vulnerability.Fixed in 4.6.0-r10 - Upgrade
Upgrade
cleanstart/solrto a version that resolves this vulnerability.Fixed in 9.11.0-r0
Event History
Nov 13, 2026
Advisory Published
via OSV·12:37 AM
Data Sourced
via OSV·12:37 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Does exploitation require an authenticated account or user interaction?
No. The CVSS vector indicates network access is sufficient, with no privileges required and no user interaction required; however, attack complexity is rated high.
2
What security impact is indicated?
The reported impact is limited to availability. Confidentiality and integrity impacts are scored as none, while availability impact is scored high.