StackRadar

CVE-2026-56740

High

Advisory

Published 18 Jun 2026In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.006
46th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
97
of 17,781 indexed, latest versions
Container images
78
deployed by those charts
Fix available
1 of 1
affected package

JLine3 Telnet server: Unauthenticated Remote Memory Exhaustion via Unbounded Telnet NEW-ENVIRON Variables

Carried by container images the latest versions of 97 of 17,781 indexed charts deploy, on 78 images.

Affected packageAffected versionsFixed inImages
jline-remote-telnetmaven3.8.2, 3.9.0, 3.12.1, 3.13.1+13 more3.30.1478
OSV records
GHSA-47qp-hqvx-6r3f

Charts affected

97 by stars
ChartLatestAffected imagesRadar Score
milvusmilvus-helm5.0.271 of 4See more

milvus milvus-helm 5.0.27

1 of the 4 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.0.79c9947de139d
jline-remote-telnet@3.21.0
3.30.14

Open the chart page →

10,670
zookeepercloudpirates-zookeeperVerified publisher0.13.111 of 1See more

zookeeper cloudpirates-zookeeper 0.13.11

1 of the 1 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
library/zookeeper:3.9.5cab8944a33a1
jline-remote-telnet@3.25.1
3.30.14

Open the chart page →

2,924
polarisapache-polarisOfficialVerified publisher1.3.0-incubating1 of 1See more

polaris apache-polaris 1.3.0-incubating

1 of the 1 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
apache/polaris:lateste66366e783f1
jline-remote-telnet@3.9.0
3.30.14

Open the chart page →

455
druiddruid-helmVerified publisher37.0.21 of 3See more

druid druid-helm 37.0.2

1 of the 3 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
apache/druid:37.0.00116fb802786
jline-remote-telnet@3.9.0
3.30.14

Open the chart page →

3,812
kafkakubelauncherVerified publisher0.1.261 of 1See more

kafka kubelauncher 0.1.26

1 of the 1 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/kafkadigest-pinned43e1085cd0a8
jline-remote-telnet@3.25.1
3.30.14

Open the chart page →

1,360
kafkakafka18.0.11 of 1See more

kafka kafka 18.0.1

1 of the 1 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
kafkace/kafka:v3.7.1-63ba8d27adc206bf5a4
jline-remote-telnet@3.25.1
3.30.14

Open the chart page →

3,395
hadoopbigdata-chartsVerified publisher1.0.11 of 2See more

hadoop bigdata-charts 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
5200710/hadoop:3.2.3-java8092d3088a5fb
jline-remote-telnet@3.9.0
3.30.14

Open the chart page →

12,111
grayloggraylog2OfficialVerified publisher2.0.01 of 2See more

graylog graylog2 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
graylog/graylog-enterprise:7.1.88a1f641cd7aa
jline-remote-telnet@3.9.0
3.30.14

Open the chart page →

1,500
thehivestrangebee-helmOfficialVerified publisher1.0.61 of 7See more

thehive strangebee-helm 1.0.6

1 of the 7 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
strangebee/thehive:5.7.6-1e77b713124dd
jline-remote-telnet@3.29.0
3.30.14

Open the chart page →

16,210
druidwiremindVerified publisher1.22.11 of 3See more

druid wiremind 1.22.1

1 of the 3 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
apache/druid:29.0.10cef139b6bf1
jline-remote-telnet@3.9.0
3.30.14

Open the chart page →

7,930
openhabhelmforgeVerified publisher1.2.01 of 1See more

openhab helmforge 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
openhab/openhab:5.2.1bfd4a60e90da
jline-remote-telnet@3.30.9
3.30.14

Open the chart page →

3,641
flyte-binaryflyte2.0.481 of 4See more

flyte-binary flyte 2.0.48

1 of the 4 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
jline-remote-telnet@3.9.0
3.30.14

Open the chart page →

4,641
kafka-chartsoldevelo-kafka-chart32.4.41 of 1See more

kafka-chart soldevelo-kafka-chart 32.4.4

1 of the 1 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
soldevelo/kafka:4.0.0-debian-12-r0cfdc08c2f577
jline-remote-telnet@3.25.1
3.30.14

Open the chart page →

2,355
thingsboard-clusterthingsboard-cluster-bettaVerified publisher0.2.261 of 6See more

thingsboard-cluster thingsboard-cluster-betta 0.2.26

1 of the 6 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:3.5.0-debian-11-r08657bb93a581
jline-remote-telnet@3.22.0
3.30.14

Open the chart page →

14,566
icat-k8salba-helm-chartsVerified publisher1.1.02 of 4See more

icat-k8s alba-helm-charts 1.1.0

2 of the 4 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
payara/micro:7.2026.2-jdk25fb44b8ce1cb2
jline-remote-telnet@3.30.6
3.30.14
payara/server-full:7.2026.2-jdk2531f1253f0cf8
jline-remote-telnet@3.30.6
3.30.14

Open the chart page →

3,697
clearml-servingallegroaiVerified publisher1.6.21 of 9See more

clearml-serving allegroai 1.6.2

1 of the 9 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:3.4.0-debian-11-r6ac64829e45b3
jline-remote-telnet@3.21.0
3.30.14

Open the chart page →

17,877
apache-rangerapache-ranger0.1.01 of 2See more

apache-ranger apache-ranger 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
apache/ranger:2.7.076c176e8a0e4
jline-remote-telnet@3.9.0
3.30.14

Open the chart page →

7,740
soarv113assist-iot-cybersecurity-monitoring-soar0.1.31 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-thv:latestc8b6c7eaa0cd
jline-remote-telnet@3.9.0
3.30.14

Open the chart page →

17,896
kafkacloudpirates-kafkaVerified publisher0.1.61 of 1See more

kafka cloudpirates-kafka 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
apache/kafka:4.3.177e3df905404
jline-remote-telnet@3.30.4
3.30.14

Open the chart page →

549
nifid4nVerified publisher2.0.01 of 5See more

nifi d4n 2.0.0

1 of the 5 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
apache/nifi-registry:1.26.07cdfd8deec92
jline-remote-telnet@3.25.1
3.30.14

Open the chart page →

5,398
elasticsearch-dataempathyco0.2.01 of 2See more

elasticsearch-data empathyco 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
empathyco/elasticsearch:6.6.2-memlockbcf4365ee7ec
jline-remote-telnet@3.8.2
3.30.14

Open the chart page →

3,703
elasticsearch-masterempathyco0.3.01 of 2See more

elasticsearch-master empathyco 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
empathyco/elasticsearch:6.6.2-memlockbcf4365ee7ec
jline-remote-telnet@3.8.2
3.30.14

Open the chart page →

3,703
enavenav-service-architectureVerified publisher0.0.71 of 10See more

enav enav-service-architecture 0.0.7

1 of the 10 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
apache/kafka:3.9.0fbc7d7c428e3
jline-remote-telnet@3.25.1
3.30.14

Open the chart page →

15,860
gentrace-self-hostedgentrace-self-hostedVerified publisher0.1.31 of 9See more

gentrace-self-hosted gentrace-self-hosted 0.1.3

1 of the 9 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:7.4.4c0224a1adf7a
jline-remote-telnet@3.22.0
3.30.14

Open the chart page →

15,562
kafkahelmforgeVerified publisher1.3.141 of 1See more

kafka helmforge 1.3.14

1 of the 1 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
apache/kafka:4.3.177e3df905404
jline-remote-telnet@3.30.4
3.30.14

Open the chart page →

549
kafka-kraft-on-k8skafka-kraft-on-k8sVerified publisher1.1.03 of 3See more

kafka-kraft-on-k8s kafka-kraft-on-k8s 1.1.0

3 of the 3 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
kafkakraft/kafka-connect:3.7.0062d697db7e5
jline-remote-telnet@3.22.0
3.30.14
kafkakraft/kafka-controller:3.7.0f261ad288fce
jline-remote-telnet@3.22.0
3.30.14
kafkakraft/kafkakraft:3.7.02e4b593b878b
jline-remote-telnet@3.22.0
3.30.14

Open the chart page →

14,130
kokukokuVerified publisher1.0.01 of 7See more

koku koku 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
jline-remote-telnet@3.9.0
3.30.14

Open the chart page →

12,019
hertzbeatkubesphere-testVerified publisher1.4.11 of 4See more

hertzbeat kubesphere-test 1.4.1

1 of the 4 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
apache/iotdb:0.13.3-nodeafa47bf1692a
jline-remote-telnet@3.21.0
3.30.14

Open the chart page →

7,710
data-prepperopensearch-project-helm-chartsVerified publisher0.3.11 of 1See more

data-prepper opensearch-project-helm-charts 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
opensearchproject/data-prepper:2.8.057c25fa01d3c
jline-remote-telnet@3.25.0
3.30.14

Open the chart page →

1,692
opentelemetry-demoopentelemetry-helmVerified publisher0.41.11 of 34See more

opentelemetry-demo opentelemetry-helm 0.41.1

1 of the 34 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:3.0.0-kafka0601750a3ca4
jline-remote-telnet@3.30.4
3.30.14

Open the chart page →

22,420
sentry-k8ssentry-k8sVerified publisher1.4.11 of 11See more

sentry-k8s sentry-k8s 1.4.1

1 of the 11 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:7.6.683dbca3efd2a
jline-remote-telnet@3.25.1
3.30.14

Open the chart page →

16,449
spark-operatorwikimedia2.2.71 of 1See more

spark-operator wikimedia 2.2.7

1 of the 1 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
jline-remote-telnet@3.9.0
3.30.14

Open the chart page →

7,835
airports-kafkaairports-kafka0.1.01 of 2See more

airports-kafka airports-kafka 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
jline-remote-telnet@3.12.1
3.30.14

Open the chart page →

4,547
aktoakto0.2.02 of 7See more

akto akto 0.2.0

2 of the 7 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:6.2.11-1-ubi8ac776fad95a5
jline-remote-telnet@3.12.1
3.30.14
confluentinc/cp-zookeeper:6.2.11-1-ubi8cae577096489
jline-remote-telnet@3.12.1
3.30.14

Open the chart page →

13,613
akto-central-setupakto1.1.101 of 5See more

akto-central-setup akto 1.1.10

1 of the 5 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.2.28e01c0305844
jline-remote-telnet@3.30.4
3.30.14

Open the chart page →

4,905
akto-hybrid-redactakto1.44.41 of 5See more

akto-hybrid-redact akto 1.44.4

1 of the 5 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.1.1-1-ubi9d20bd62f0182
jline-remote-telnet@3.30.4
3.30.14

Open the chart page →

4,777
akto-mini-runtimeakto0.7.221 of 3See more

akto-mini-runtime akto 0.7.22

1 of the 3 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.2.2-1-ubi98e01c0305844
jline-remote-telnet@3.30.4
3.30.14

Open the chart page →

2,741
akto-mini-runtime-shaakto0.7.231 of 3See more

akto-mini-runtime-sha akto 0.7.23

1 of the 3 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/confluentinc-cp-kafkadigest-pinnedd20bd62f0182
jline-remote-telnet@3.30.4
3.30.14

Open the chart page →

3,217
akto-mini-testingakto1.45.71 of 5See more

akto-mini-testing akto 1.45.7

1 of the 5 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.2.2-1-ubi98e01c0305844
jline-remote-telnet@3.30.4
3.30.14

Open the chart page →

6,486
akto-mini-testing-kafkaakto1.42.12 of 5See more

akto-mini-testing-kafka akto 1.42.1

2 of the 5 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:7.8.0-3-ubi8adc392d28a1e
jline-remote-telnet@3.25.1
3.30.14
confluentinc/cp-zookeeper:7.8.0-3-ubi85ca5f3269814
jline-remote-telnet@3.25.1
3.30.14

Open the chart page →

6,397
akto-mrs-runtime-combinedakto0.0.21 of 2See more

akto-mrs-runtime-combined akto 0.0.2

1 of the 2 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.1.0-1-ubi99026dbbf280d
jline-remote-telnet@3.30.4
3.30.14

Open the chart page →

1,826
akto-protectionakto0.1.02 of 4See more

akto-protection akto 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:6.2.11-1-ubi8ac776fad95a5
jline-remote-telnet@3.12.1
3.30.14
confluentinc/cp-zookeeper:6.2.11-1-ubi8cae577096489
jline-remote-telnet@3.12.1
3.30.14

Open the chart page →

11,285
akto-regional-setupakto1.3.11 of 9See more

akto-regional-setup akto 1.3.1

1 of the 9 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.2.28e01c0305844
jline-remote-telnet@3.30.4
3.30.14

Open the chart page →

7,603
akto-runtimeakto0.1.81 of 2See more

akto-runtime akto 0.1.8

1 of the 2 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.2.2-1-ubi98e01c0305844
jline-remote-telnet@3.30.4
3.30.14

Open the chart page →

1,411
akto-threat-backendakto0.1.51 of 2See more

akto-threat-backend akto 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.2.2-1-ubi98e01c0305844
jline-remote-telnet@3.30.4
3.30.14

Open the chart page →

1,490
akto-threat-clientakto0.2.01 of 2See more

akto-threat-client akto 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.2.2-1-ubi98e01c0305844
jline-remote-telnet@3.30.4
3.30.14

Open the chart page →

1,523
monitoringantmediaVerified publisher1.0.01 of 6See more

monitoring antmedia 1.0.0

1 of the 6 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
confluentinc/cp-zookeeper:latest7610a50b13e7
jline-remote-telnet@3.25.1
3.30.14

Open the chart page →

2,453
apache-iotdbapache-iotdb-single-nodeVerified publisher0.1.01 of 1See more

apache-iotdb apache-iotdb-single-node 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
apache/iotdb:0.11.28647309f95d1
jline-remote-telnet@3.16.0
3.30.14

Open the chart page →

5,277
inbox-serverappscodeVerified publisher2025.12.251 of 1See more

inbox-server appscode 2025.12.25

1 of the 1 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
ghcr.io/appscode/inbox-server:postgres-latest536358d7b17e
jline-remote-telnet@3.26.3
3.30.14

Open the chart page →

3,963
inbox-server-distributedappscodeVerified publisher2025.12.251 of 4See more

inbox-server-distributed appscode 2025.12.25

1 of the 4 container images this version deploys carry CVE-2026-56740.

Container imageDigestPackageFixed in
ghcr.io/appscode/inbox-server:latest536358d7b17e
jline-remote-telnet@3.26.3
3.30.14

Open the chart page →

15,573

Container images carrying it

78 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
hivemq/hivemq4:dns-4.5.144d194450d48e
jline-remote-telnet@3.21.0
3.30.14
1
kafkace/kafka:v3.7.1-63ba8d27adc206bf5a4
jline-remote-telnet@3.25.1
3.30.14
1
kafkakraft/kafka-connect:3.7.0062d697db7e5
jline-remote-telnet@3.22.0
3.30.14
1
kafkakraft/kafka-controller:3.7.0f261ad288fce
jline-remote-telnet@3.22.0
3.30.14
1
kafkakraft/kafkakraft:3.7.02e4b593b878b
jline-remote-telnet@3.22.0
3.30.14
1
library/zookeeper:3.9.5cab8944a33a1
jline-remote-telnet@3.25.1
3.30.14
1
onosproject/onos:2.2.144914a8d4b3f
jline-remote-telnet@3.13.2
3.30.14
1
openhab/openhab:5.2.1bfd4a60e90da
jline-remote-telnet@3.30.9
3.30.14
1
openhab/openhab:3.2.0d0aa4af452c1
jline-remote-telnet@3.21.0
3.30.14
1
opennms/sentinel:36.0.288869082a14f
jline-remote-telnet@3.30.6
3.30.14
1
opensearchproject/data-prepper:2.8.057c25fa01d3c
jline-remote-telnet@3.25.0
3.30.14
1
payara/micro:7.2026.2-jdk25fb44b8ce1cb2
jline-remote-telnet@3.30.6
3.30.14
1
payara/server-full:7.2026.2-jdk2531f1253f0cf8
jline-remote-telnet@3.30.6
3.30.14
1
soldevelo/kafka:4.0.0-debian-12-r0cfdc08c2f577
jline-remote-telnet@3.25.1
3.30.14
1
sonatype/nexus3:3.58.1586060431b64
jline-remote-telnet@3.21.0
3.30.14
1
strangebee/thehive:5.7.6-1e77b713124dd
jline-remote-telnet@3.29.0
3.30.14
1
voltha/voltha-onos:5.1.8e038acb950d3
jline-remote-telnet@3.19.0
3.30.14
1
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
jline-remote-telnet@3.22.0
3.30.14
1
ghcr.io/fleeksoft/hbase/hdfs:3.3.3.2ac62269785ac
jline-remote-telnet@3.9.0
3.30.14
1
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
jline-remote-telnet@3.14.1
3.30.14
1
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
jline-remote-telnet@3.9.0
3.30.14
1
ghcr.io/kubelauncher/kafka43e1085cd0a8
jline-remote-telnet@3.25.1
3.30.14
1
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
jline-remote-telnet@3.9.0
3.30.14
1
ghcr.io/open-telemetry/demo:3.0.0-kafka0601750a3ca4
jline-remote-telnet@3.30.4
3.30.14
1
ghcr.io/open-telemetry/demo:1.12.0-kafka071a788162e8
jline-remote-telnet@3.22.0
3.30.14
1
ghcr.io/punchplatform/punchline-java:8.1.1d46ce7b96482
jline-remote-telnet@3.9.0
3.30.14
1
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.1.0-1-ubi99026dbbf280d
jline-remote-telnet@3.30.4
3.30.14
1
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
jline-remote-telnet@3.9.0
3.30.14
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.