CLEANSTART-2026-XK33413: snappy-java through 1

Q: What does an attacker need to exploit this issue?

The vulnerability has network attack vector, low attack complexity, and requires no privileges or user interaction. An attacker able to reach a vulnerable network-exposed service may be able to exploit it.

Q: What is the expected impact?

The reported impact is limited to availability. Confidentiality and integrity impact are listed as none, while availability impact is high.

Q: Which deployments should be prioritized for review?

Review CleanStart Rundeck and CleanStart Solr deployments that include snappy-java through version 1, especially services reachable over the network.

Published Nov 13, 2026

Updated

CVE-2026-93452 affects multiple packages. snappy-java through 1. See references for individual vulnerability details.

Affected Software

2 affected componentsFixes available

cleanstart/rundeck<6.0.1-r11

6.0.1-r11

cleanstart/solr<9.11.0-r0

9.11.0-r0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/rundeck to a version that resolves this vulnerability.
Fixed in 6.0.1-r11
Upgrade
Upgrade cleanstart/solr to a version that resolves this vulnerability.
Fixed in 9.11.0-r0

Event History

Nov 13, 2026

Advisory Published

via OSV·12:37 AM

Data Sourced

via OSV·12:37 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-93452

Frequently Asked Questions

What does an attacker need to exploit this issue?