7 matches found
CVE-2026-24061-PoC-Exploit
CVE-2026-24061 - GNU inetutils-telnetd Authentication Bypass Exploit GNU inetutils-telnetd Edition - CRLF Injection to Authentication Bypass & Instant Root Shell -Overview This exploit leverages CVE-2026-24061 , a critical remote authentication bypass vulnerability in GNU inetutils-telnetd. By...
CVE-2026-24061
CVE-2026-24061 GNU inetutils-telnetd - Remote Authentication Bypass A security research tool for exploiting CVE-2026-24061, a critical remote authentication bypass vulnerability in GNU inetutils-telnetd that allows instant root shell access without authentication. Table of Contents Vulnerability...
CVE-2026-24061-lab
CVE-2026-24061 — Reproduction Lab ⚠️ For educational purposes only. Isolated lab environment. Français ci-dessous Summary Critical authentication bypass CVSS 9.8 in GNU InetUtils telnetd ≤ 2.7. By injecting -f root as the USER variable via the Telnet NEWENVIRON option, an unauthenticated attacker...
CVE-2026-24061
CVE-2026-24061: GNU InetUtils telnetd Argument Injection Overview An argument injection vulnerability affects the GNU InetUtils Telnet daemon telnetd. Insufficient sanitization of client-supplied environment variables during NEWENVIRON negotiation allows an attacker to inject command-line flags...
CVE-2026-24061-POC
CVE-2026-24061 GNU inetutils-telnetd Remote Authentication Bypass CVSS Score: 9.8 Critical Overview A vulnerability in GNU inetutils-telnetd allows remote attackers to bypass authentication via the NEWENVIRON telnet option. By sending a crafted USER environment variable containing the value "-f...
CVE-2026-32772: Incorrect Resource Transfer Between Spheres
telnet in GNU inetutils through 2.7 allows servers to read arbitrary environment variables from clients via NEWENVIRON SEND USERVAR...
