CVE-2026-24061

Laboratorio de Auto-Login Telnet con Docker Un laboratorio Docker ligero para experimentar con la negociación del protocolo Telnet , explicado en el exploit CVE-2026-24061, que contiene inyección automática de nombre de usuario mediante la opción NEW-ENVIRON. Este proyecto crea un entorno...

CVE-2026-24061

text feat3 1change feat2 1feat test CVE-2026-24061 GNU Inetutils telnetd Remote Authentication Bypass Seriously, telnet in 2026? Come on guys, it's time to move on. SSH exists since 1995. 🤦 Description A critical authentication bypass vulnerability in GNU Inetutils telnetd affecting versions 1.9....

CVE-2026-24061-GNU-Inetutils-telnetd-Remote-Authentication-Bypass-Root-Shell-

🧨 Resumen Este repositorio contiene un exploit de Prueba de Concepto para la vulnerabilidad de omisión de autenticación remota en GNU Inetutils telnetd. El problema surge porque telnetd no sanea adecuadamente la variable de entorno USER recibida a través de la negociación Telnet NEW‑ENVIRON antes...

CVE-2026-24061

CVE-2026-24061 PoC de vulnerabilidad de omisión de autenticación NEW-ENVIRON en Telnet. Compilación Windows MinGW: root@kitploit: gcc -o exploit.exe exploit.c -lws232 Linux: root@kitploit: gcc -o exploit exploit.c -lpthread Uso root@kitploit: ./exploit puerto Ejemplo root@kitploit: ./exploit...

CVE-2026-24061

-c0392b?style=flat GNU InetUtils telnetd - Root Remoto Não Autenticado via Injeção de Variável NEW-ENVIRON Visão Geral - Análise Técnica - Versões Afetadas - Uso - Remediação - Referências Visão Geral da Vulnerabilidade CVE-2026-24061 é uma vulnerabilidade crítica de bypass de autenticação no...

telnetd_CVE-2026-24061_tester

Telnetd CVE-2026-24061 Test-Skript Ein Python-Sicherheitstesttool zur Erkennung von Schwachstellen bei der Umgebungsvariablen-Injektion in telnetd-Servern über die NEW-ENVIRON-Telnet-Option. Übersicht Dieses Skript testet telnetd-Server auf CVE-2026-24061 , eine Schwachstelle, die es Angreifern...

CVE-2026-24061-telnet2root

Escáner y Exploit de Vulnerabilidad CVE-2026-24061 👨‍💻 Autor: Furkan KAYAPINAR @FurkanKAYAPINAR Descripción general Este repositorio contiene un escáner de vulnerabilidades y un exploit interactivo para CVE-2026-24061. Esta vulnerabilidad afecta a inetutils-telnetd y potencialmente a otras...

scan-cve-2026-24061

CVE-2026-24061 Scanner – GNU inetutils telnetd Auth Bypass ⚠️ AVISO LEGAL MUY IMPORTANTE ⚠️ Esta herramienta es exclusivamente para fines educativos, investigación de seguridad, análisis de vulnerabilidades y pruebas autorizadas. Cualquier uso no autorizado contra sistemas que no posees o para los...

CVE-2026-24061

Telnet भेद्यता स्कैनर और एक्सप्लॉइटर यह Python स्क्रिप्ट main.py एक मल्टी-थ्रेडेड टूल है जिसे लक्षित IP/होस्टनामों की सूची को स्कैन करने और Telnet पर एक विशिष्ट भेद्यता का शोषण करने के लिए डिज़ाइन किया गया है। !WARNING यह टूल केवल शैक्षिक उद्देश्यों और अधिकृत पेनेट्रेशन परीक्षण के लिए है। इसका...

CVE-2026-24061

🚨 CVE-2026-24061 — “TelneTD” Kritischer Remote-Authentifizierungs-Bypass in GNU Inetutils telnetd Der Geist von 2015 ist gerade zurückgekehrt, um alles zu übernehmen, was noch Telnet betreibt. Keine Authentifizierung. Eine Umgebungsvariable. Sofortige Root-Shell. ⚠️ Übersicht CVE-2026-24061 ist...

CVE-2026-24061

CVE-2026-24061 GNU Inetutils telnetd Bypass dell'autenticazione remota Seriamente, telnet nel 2026? Andiamo, ragazzi, è ora di passare oltre. SSH esiste dal 1995. 🤦 Descrizione Una vulnerabilità critica di bypass dell'autenticazione in GNU Inetutils telnetd che interessa le versioni da 1.9.3 a 2....

TelnetdBypass-

TelnetdBypass — CVE-2026-24061 Scanner Ein Python-basierter Sicherheitsscanner, der CVE-2026-24061 erkennt und ausnutzt, eine kritische CVSS 9.8 Authentifizierungsumgehungsschwachstelle in GNU InetUtils telnetd Versionen 1.9.3 bis 2.7. Funktionsweise Der Scanner injiziert über die Telnet...

CVE-2026-56740 JLine: Unauthenticated Remote Memory Exhaustion via Unbounded Telnet NEW-ENVIRON Variables

JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not limit the number of environment variables a client may inject via the Telnet NEW-ENVIRON option, and TelnetIO.readNEVariables in TelnetIO.java:1127-1180...

CVE-2026-56740

JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not limit the number of environment variables a client may inject via the Telnet NEW-ENVIRON option, and TelnetIO.readNEVariables in TelnetIO.java:1127-1180...

CVE-2026-56740

JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not limit the number of environment variables a client may inject via the Telnet NEW-ENVIRON option, and TelnetIO.readNEVariables in TelnetIO.java:1127-1180...

CVE-2026-56740

JLine3 Telnet server remote-telnet module in JLine prior to versions 3.30.14, 4.0.16, and 4.2.1 does not limit the number of environment variables injected via Telnet NEW-ENVIRON. TelnetIO.readNEVariables() stores each variable pair in a HashMap within ConnectionData (lines 1127-1180), allowing a...

SUSE-SU-2026:22562-1 Security update for jline3

This update for jline3 fixes the following issues: Changes in jline3: unauthenticated remote memory exhaustion via unbounded Telnet 'NEW-ENVIRON variables bsc1269021...

OPENSUSE-SU-2026:21221-1 Security update for jline3

This update for jline3 fixes the following issues: Changes in jline3: unauthenticated remote memory exhaustion via unbounded Telnet 'NEW-ENVIRON variables bsc1269021...

openSUSE 16: jline3 / jline3-builtins / jline3-console / jline3-console-ui / etc (openSUSE-SU-2026:21221-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21221-1 advisory. Changes in jline3: unauthenticated remote memory exhaustion via unbounded Telnet 'NEW-ENVIRON variables bsc1269021 Tenable has extracted the preceding...

Astra Linux – Vulnerability in inetutils

In GNU inetutils, the telnet utility in version 2.7 allows servers to read arbitrary environment variables from clients using the NEWENVIRON SENDUSERVAR function...