Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
cleanstart Solr, Kafka, and Rundeck mishandle NumberInput data
published 14 days ago
Summary
The NumberInput component in cleanstart's Solr, Kafka, and Rundeck products can be tricked into processing unexpected input. This could cause the applications to behave incorrectly or crash, disrupting services. Update to the latest versions or apply the vendor's recommended patches to fix the handling of NumberInput values.
What to do
- Update cleanstart solr to version 9.8.1-r5.
- Update cleanstart kafka to version 4.0.2-r5.
- Update cleanstart kafka to version 4.1.2-r5.
- Update cleanstart rundeck to version 6.1.0-r1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | solr |
< 9.8.1-r5 Fix: upgrade to 9.8.1-r5
|
| CleanStart | cleanstart | kafka |
< 4.0.2-r5 < 4.1.2-r5 Fix: upgrade to 4.0.2-r5
|
| CleanStart | cleanstart | rundeck |
< 6.1.0-r1 Fix: upgrade to 6.1.0-r1
|
Original advisory text
NumberInput
CVE-2026-89407 affects multiple packages. NumberInput. See references for individual vulnerability details.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published22 Oct 2026
Updated22 Oct 2026
First seen22 Oct 2026
Sources
CLEANSTART-2026-PQ78486 · OSV
Track software like this
Free during beta