GNU Inetutils vulnerabilities
4 published CVEs name GNU Inetutils among the affected products; CISA lists 1 of them as exploited in the wild.
- Published CVEs
- 4
- Last 12 months
- 4
- Critical
- 2
- Known exploited
- 1
Critical 2High 1Medium 0Low 1Not scored 0
Known exploitedNewest addition to KEV first
- CVE-2026-24061
telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable.
GNU · Inetutils
ExploitedCritical9.8
Newest CVEs
- CVE-2026-32772
telnet in GNU inetutils through 2.7 allows servers to read arbitrary environment variables from clients via NEW_ENVIRON SEND USERVAR.
GNU · inetutils
Low3.4 - CVE-2026-32746
telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because add_slc does not check…
GNU · inetutils
Critical9.8 - CVE-2026-28372
telnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by abusing systemd service credentials support added to the login(1)…
GNU · inetutils
High7.4 - CVE-2026-24061
telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable.
GNU · Inetutils
ExploitedCritical9.8