Get real-time updates on Telegram
CVE-2026-41256, CVE-2026-41257, CVE-2026-43894 +6 more CVEs: Affected product not specified by the source
CVE-2026-41256, CVE-2026-41257, CVE-2026-43894, CVE-2026-43895, CVE-2026-43896, CVE-2026-44777, CVE-2026-47770, CVE-2026-49839, CVE-2026-54679 affects jq. EPSS 0.00157 (percentile 0.04512), scored 22-Oct-2026. Fixed version: 1.8.2-1.mga10.
CVE-2026-41256
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-41257
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-43894
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-43895
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-43896
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-44777
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-47770
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-49839
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-54679
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
- CVE
- CVE-2026-43895, CVE-2026-43896, CVE-2026-44777, CVE-2026-47770, CVE-2026-49839, CVE-2026-54679
- Product
- jq
- CCR priority
- 0.0 /100 (P5)
- EPSS
- 0.00157 · percentile 0.04512 · 2026-10-22
- KEV
- no
Provenance
- OSV.dev · Source record · observed 2026-10-23 07:49:27.727257+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-41256.html