Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-56740

JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not limit the number of environment variables a client may inject via the Telnet NEW-ENVIRON option, and TelnetIO.readNEVariables() in TelnetIO.java:1127-1180 stores each variable pair in a HashMap held by ConnectionData, allowing an unauthenticated attacker to flood unique variable pairs before the terminating IAC SE byte and exhaust JVM heap memory with an OutOfMemoryError. This issue is fixed in versions 3.30.14, 4.0.16, and 4.2.1.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 47.0%
CVSS Severity
CVSS v3 Score 7.5
Products affected by CVE-2026-56740
  • Jline » Jline » Version: 1.0
    cpe:2.3:a:jline:jline:1.0
  • Jline » Jline » Version: 2.0
    cpe:2.3:a:jline:jline:2.0
  • Jline » Jline » Version: 2.1
    cpe:2.3:a:jline:jline:2.1
  • Jline » Jline » Version: 2.10
    cpe:2.3:a:jline:jline:2.10
  • Jline » Jline » Version: 2.11
    cpe:2.3:a:jline:jline:2.11
  • Jline » Jline » Version: 2.12
    cpe:2.3:a:jline:jline:2.12
  • Jline » Jline » Version: 2.12.1
    cpe:2.3:a:jline:jline:2.12.1
  • Jline » Jline » Version: 2.13
    cpe:2.3:a:jline:jline:2.13
  • Jline » Jline » Version: 2.14
    cpe:2.3:a:jline:jline:2.14
  • Jline » Jline » Version: 2.14.1
    cpe:2.3:a:jline:jline:2.14.1
  • Jline » Jline » Version: 2.14.2
    cpe:2.3:a:jline:jline:2.14.2
  • Jline » Jline » Version: 2.14.3
    cpe:2.3:a:jline:jline:2.14.3
  • Jline » Jline » Version: 2.14.4
    cpe:2.3:a:jline:jline:2.14.4
  • Jline » Jline » Version: 2.14.5
    cpe:2.3:a:jline:jline:2.14.5
  • Jline » Jline » Version: 2.14.6
    cpe:2.3:a:jline:jline:2.14.6
  • Jline » Jline » Version: 2.2.1
    cpe:2.3:a:jline:jline:2.2.1
  • Jline » Jline » Version: 2.3
    cpe:2.3:a:jline:jline:2.3
  • Jline » Jline » Version: 2.4
    cpe:2.3:a:jline:jline:2.4
  • Jline » Jline » Version: 2.5
    cpe:2.3:a:jline:jline:2.5
  • Jline » Jline » Version: 2.6
    cpe:2.3:a:jline:jline:2.6
  • Jline » Jline » Version: 2.7
    cpe:2.3:a:jline:jline:2.7
  • Jline » Jline » Version: 2.8
    cpe:2.3:a:jline:jline:2.8
  • Jline » Jline » Version: 2.9
    cpe:2.3:a:jline:jline:2.9
  • Jline » Jline » Version: 3.0.0
    cpe:2.3:a:jline:jline:3.0.0
  • Jline » Jline » Version: 3.0.1
    cpe:2.3:a:jline:jline:3.0.1
  • Jline » Jline » Version: 3.0.2
    cpe:2.3:a:jline:jline:3.0.2
  • Jline » Jline » Version: 3.0.3
    cpe:2.3:a:jline:jline:3.0.3
  • Jline » Jline » Version: 3.0.4
    cpe:2.3:a:jline:jline:3.0.4
  • Jline » Jline » Version: 3.1.0
    cpe:2.3:a:jline:jline:3.1.0
  • Jline » Jline » Version: 3.1.1
    cpe:2.3:a:jline:jline:3.1.1
  • Jline » Jline » Version: 3.1.2
    cpe:2.3:a:jline:jline:3.1.2
  • Jline » Jline » Version: 3.1.3
    cpe:2.3:a:jline:jline:3.1.3
  • Jline » Jline » Version: 3.10.0
    cpe:2.3:a:jline:jline:3.10.0
  • Jline » Jline » Version: 3.11.0
    cpe:2.3:a:jline:jline:3.11.0
  • Jline » Jline » Version: 3.12.0
    cpe:2.3:a:jline:jline:3.12.0
  • Jline » Jline » Version: 3.12.1
    cpe:2.3:a:jline:jline:3.12.1
  • Jline » Jline » Version: 3.13.0
    cpe:2.3:a:jline:jline:3.13.0
  • Jline » Jline » Version: 3.13.1
    cpe:2.3:a:jline:jline:3.13.1
  • Jline » Jline » Version: 3.13.2
    cpe:2.3:a:jline:jline:3.13.2
  • Jline » Jline » Version: 3.13.3
    cpe:2.3:a:jline:jline:3.13.3
  • Jline » Jline » Version: 3.14.0
    cpe:2.3:a:jline:jline:3.14.0
  • Jline » Jline » Version: 3.14.1
    cpe:2.3:a:jline:jline:3.14.1
  • Jline » Jline » Version: 3.15.0
    cpe:2.3:a:jline:jline:3.15.0
  • Jline » Jline » Version: 3.16.0
    cpe:2.3:a:jline:jline:3.16.0
  • Jline » Jline » Version: 3.17.0
    cpe:2.3:a:jline:jline:3.17.0
  • Jline » Jline » Version: 3.17.1
    cpe:2.3:a:jline:jline:3.17.1
  • Jline » Jline » Version: 3.18.0
    cpe:2.3:a:jline:jline:3.18.0
  • Jline » Jline » Version: 3.19.0
    cpe:2.3:a:jline:jline:3.19.0
  • Jline » Jline » Version: 3.2.0
    cpe:2.3:a:jline:jline:3.2.0
  • Jline » Jline » Version: 3.20.0
    cpe:2.3:a:jline:jline:3.20.0
  • Jline » Jline » Version: 3.21.0
    cpe:2.3:a:jline:jline:3.21.0
  • Jline » Jline » Version: 3.22.0
    cpe:2.3:a:jline:jline:3.22.0
  • Jline » Jline » Version: 3.23.0
    cpe:2.3:a:jline:jline:3.23.0
  • Jline » Jline » Version: 3.24.0
    cpe:2.3:a:jline:jline:3.24.0
  • Jline » Jline » Version: 3.24.1
    cpe:2.3:a:jline:jline:3.24.1
  • Jline » Jline » Version: 3.25.0
    cpe:2.3:a:jline:jline:3.25.0
  • Jline » Jline » Version: 3.25.1
    cpe:2.3:a:jline:jline:3.25.1
  • Jline » Jline » Version: 3.26.0
    cpe:2.3:a:jline:jline:3.26.0
  • Jline » Jline » Version: 3.26.1
    cpe:2.3:a:jline:jline:3.26.1
  • Jline » Jline » Version: 3.26.2
    cpe:2.3:a:jline:jline:3.26.2
  • Jline » Jline » Version: 3.26.3
    cpe:2.3:a:jline:jline:3.26.3
  • Jline » Jline » Version: 3.27.0
    cpe:2.3:a:jline:jline:3.27.0
  • Jline » Jline » Version: 3.27.1
    cpe:2.3:a:jline:jline:3.27.1
  • Jline » Jline » Version: 3.28.0
    cpe:2.3:a:jline:jline:3.28.0
  • Jline » Jline » Version: 3.29.0
    cpe:2.3:a:jline:jline:3.29.0
  • Jline » Jline » Version: 3.3.0
    cpe:2.3:a:jline:jline:3.3.0
  • Jline » Jline » Version: 3.3.1
    cpe:2.3:a:jline:jline:3.3.1
  • Jline » Jline » Version: 3.30.0
    cpe:2.3:a:jline:jline:3.30.0
  • Jline » Jline » Version: 3.30.1
    cpe:2.3:a:jline:jline:3.30.1
  • Jline » Jline » Version: 3.30.10
    cpe:2.3:a:jline:jline:3.30.10
  • Jline » Jline » Version: 3.30.11
    cpe:2.3:a:jline:jline:3.30.11
  • Jline » Jline » Version: 3.30.12
    cpe:2.3:a:jline:jline:3.30.12
  • Jline » Jline » Version: 3.30.13
    cpe:2.3:a:jline:jline:3.30.13
  • Jline » Jline » Version: 3.30.2
    cpe:2.3:a:jline:jline:3.30.2
  • Jline » Jline » Version: 3.30.3
    cpe:2.3:a:jline:jline:3.30.3
  • Jline » Jline » Version: 3.30.4
    cpe:2.3:a:jline:jline:3.30.4
  • Jline » Jline » Version: 3.30.5
    cpe:2.3:a:jline:jline:3.30.5
  • Jline » Jline » Version: 3.30.6
    cpe:2.3:a:jline:jline:3.30.6
  • Jline » Jline » Version: 3.30.7
    cpe:2.3:a:jline:jline:3.30.7
  • Jline » Jline » Version: 3.30.8
    cpe:2.3:a:jline:jline:3.30.8
  • Jline » Jline » Version: 3.30.9
    cpe:2.3:a:jline:jline:3.30.9
  • Jline » Jline » Version: 3.4.0
    cpe:2.3:a:jline:jline:3.4.0
  • Jline » Jline » Version: 3.5.0
    cpe:2.3:a:jline:jline:3.5.0
  • Jline » Jline » Version: 3.5.1
    cpe:2.3:a:jline:jline:3.5.1
  • Jline » Jline » Version: 3.5.2
    cpe:2.3:a:jline:jline:3.5.2
  • Jline » Jline » Version: 3.6.0
    cpe:2.3:a:jline:jline:3.6.0
  • Jline » Jline » Version: 3.6.1
    cpe:2.3:a:jline:jline:3.6.1
  • Jline » Jline » Version: 3.6.2
    cpe:2.3:a:jline:jline:3.6.2
  • Jline » Jline » Version: 3.7.0
    cpe:2.3:a:jline:jline:3.7.0
  • Jline » Jline » Version: 3.7.1
    cpe:2.3:a:jline:jline:3.7.1
  • Jline » Jline » Version: 3.8.0
    cpe:2.3:a:jline:jline:3.8.0
  • Jline » Jline » Version: 3.8.1
    cpe:2.3:a:jline:jline:3.8.1
  • Jline » Jline » Version: 3.8.2
    cpe:2.3:a:jline:jline:3.8.2
  • Jline » Jline » Version: 3.9.0
    cpe:2.3:a:jline:jline:3.9.0
  • Jline » Jline » Version: 4.0.0
    cpe:2.3:a:jline:jline:4.0.0
  • Jline » Jline » Version: 4.0.1
    cpe:2.3:a:jline:jline:4.0.1
  • Jline » Jline » Version: 4.0.10
    cpe:2.3:a:jline:jline:4.0.10
  • Jline » Jline » Version: 4.0.11
    cpe:2.3:a:jline:jline:4.0.11
  • Jline » Jline » Version: 4.0.12
    cpe:2.3:a:jline:jline:4.0.12
  • Jline » Jline » Version: 4.0.13
    cpe:2.3:a:jline:jline:4.0.13
  • Jline » Jline » Version: 4.0.14
    cpe:2.3:a:jline:jline:4.0.14
  • Jline » Jline » Version: 4.0.15
    cpe:2.3:a:jline:jline:4.0.15
  • Jline » Jline » Version: 4.0.2
    cpe:2.3:a:jline:jline:4.0.2
  • Jline » Jline » Version: 4.0.3
    cpe:2.3:a:jline:jline:4.0.3
  • Jline » Jline » Version: 4.0.4
    cpe:2.3:a:jline:jline:4.0.4
  • Jline » Jline » Version: 4.0.5
    cpe:2.3:a:jline:jline:4.0.5
  • Jline » Jline » Version: 4.0.6
    cpe:2.3:a:jline:jline:4.0.6
  • Jline » Jline » Version: 4.0.7
    cpe:2.3:a:jline:jline:4.0.7
  • Jline » Jline » Version: 4.0.8
    cpe:2.3:a:jline:jline:4.0.8
  • Jline » Jline » Version: 4.0.9
    cpe:2.3:a:jline:jline:4.0.9
  • Jline » Jline » Version: 4.1.0
    cpe:2.3:a:jline:jline:4.1.0
  • Jline » Jline » Version: 4.1.1
    cpe:2.3:a:jline:jline:4.1.1
  • Jline » Jline » Version: 4.1.2
    cpe:2.3:a:jline:jline:4.1.2
  • Jline » Jline » Version: 4.1.3
    cpe:2.3:a:jline:jline:4.1.3
  • Jline » Jline » Version: 4.2.0
    cpe:2.3:a:jline:jline:4.2.0


Products
Pricing
Contact Us

Shodan ® - All rights reserved