Debian: Security Advisory (DLA-4527-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Exploit for Argument Injection in Gnu Inetutils

CVE-2026-24061 — GNU InetUtils telnetd Authentication Bypass...

Exploit for Argument Injection in Gnu Inetutils

CVE-2026-24061: GNU Telnetd Authentication Bypass overview...

📄 GNU Inetutils telnetd NEW-ENVIRON Authentication Bypass

This Metasploit module exploits an authentication bypass vulnerability in GNU Inetutils telnetd. By sending a specially crafted NEW-ENVIRON subnegotiation with a USER variable containing -f root, an attacker can login as root without a password. This occurs because telnetd passes the environment...

Ubuntu: Security Advisory (USN-7992-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

📄 GNU Inetutils 2.7 Authentication Bypass

GNU Inetutils version 2.7 telnet authentication bypass proof of concept exploit written in PHP. ============================================================================================================================================= | Title : GNU Inetutils Telnet Authentication Bypass PHP...

GNU Inetutils telnetd Remote Authentication Bypass (CVE-2026-24061)

Binary data telnetdcve-2026-24061.nbin...

Exploit for Argument Injection in Gnu Inetutils

CVE-2026-24061 CVE-2026-24061 Telnet RCE Exploit For...

Exploit for Argument Injection in Gnu Inetutils

Tell Me Root Batch Scanning Tool for the CVE-2026-24061 Telne...

Exploit for Argument Injection in Gnu Inetutils

Telnetd Auth Bypass Scanner CVE-2026-24061 A Python-based s...

📄 GNU Inetutils 2.7 telnet Privilege Escalation

Although Packet Storm has multiple exploits relating to this issue, this advisory keeps the details on the GNU Inetutils 2.7 telnetd privilege escalation vulnerability quite simple. Titles: Telnet Argument Injection Privilege Escalation - RCE Author: nu11secur1ty Date: 1/24/2026 Vendor:...

Exploit for CVE-2026-24061

CV...

[SECURITY] [DLA 4453-1] inetutils security update

Debian LTS Advisory DLA-4453-1 [email protected] https://www.debian.org/lts/security/ Andreas Henriksson January 25, 2026 https://wiki.debian.org/LTS Package : inetutils Version : 2:2.0-1+deb11u3 CVE ID : CVE-2026-24061 Debian Bug : 1126047 Kyu Neushwaistein aka Carlos Cortes Alvarez...

Exploit for CVE-2026-24061

CVE-2026-24061 - Telnet Argument Injection Nuclei template дл...

Debian: Security Advisory (DSA-6106-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DEBIAN-CVE-2026-24061

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable...

CVE-2026-24061

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable...

CVE-2026-24061

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable...

CVE-2026-24061

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable...

CVE-2026-24061

Summary: CVE-2026-24061 affects GNU Inetutils’ telnetd (up to 2.7) and enables remote authentication bypass by setting the USER environment variable to "-f root". This can lead to unauthorized root access if telnetd is reachable. What’s affected (per provided docs): inetutils telnetd; GNU Inetuti...