Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.7

Spark package can let attackers run code

published 29 days ago
Summary

The Spark component from cleanstart allows a flaw that could let a malicious user run unwanted programs on your system. This could lead to data loss or unauthorized access. Update to the latest cleanstart Spark version or apply the vendor's patch as soon as possible.

What to do
  • Update cleanstart spark to version 3.5.9-r3.
Affected software
Ecosystem VendorProductAffected versions
CleanStart cleanstart spark < 3.5.9-r3
Fix: upgrade to 3.5.9-r3
Original advisory text
package com
Security vulnerability affects the spark package. The package com.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.7 High
Timeline
Published7 Oct 2026
Updated7 Oct 2026
First seen7 Oct 2026
Sources
CLEANSTART-2026-HP73429 · OSV
Track software like this
Free during beta