CLEANSTART-2026-YS08758: Netty netty-tcnative before 2
Published Nov 13, 2026
·Updated
CVE-2026-116539 affects multiple packages. Netty netty-tcnative before 2. See references for individual vulnerability details.
Affected Software
3 affected componentsFixes available
cleanstart/wso2am<4.7.0-r5
4.7.0-r5
cleanstart/wso2mi<4.6.0-r10
4.6.0-r10
cleanstart/solr<9.11.0-r0
9.11.0-r0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/wso2amto a version that resolves this vulnerability.Fixed in 4.7.0-r5 - Upgrade
Upgrade
cleanstart/wso2mito a version that resolves this vulnerability.Fixed in 4.6.0-r10 - Upgrade
Upgrade
cleanstart/solrto a version that resolves this vulnerability.Fixed in 9.11.0-r0
Event History
Nov 13, 2026
Advisory Published
via OSV·12:37 AM
Data Sourced
via OSV·12:37 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What does an attacker need to exploit this issue?
The CVSS vector indicates network access is required. No privileges or user interaction are required, but exploitation has high attack complexity.
2
What is the expected security impact if exploitation succeeds?
The reported impact is high availability impact, with no reported confidentiality or integrity impact.