CVE-2026-24061

🔒 CVE-2026-24061 - Эксплуатация критической ошибки аутентификации 🚀 Начало работы Добро пожаловать в проект CVE-2026-24061. Это приложение демонстрирует критическую уязвимость безопасности. Оно позволяет злоумышленникам обходить аутентификацию в GNU inetutils-telnetd. Этот README проведёт вас чер...

CyberhawksLab-telnetCVE

Отчёт о находке в ходе лабораторной демонстрации CyberHawks Авторство: @SafeBreach-Labs CVE: CVE-2026-24061 Лаборатория: Cyberhawks Lab Цель: 10.1.1.1 demo.cyberhawks.lab Идентификатор находки: WU-08 Дата: 2026-09-08 Критичность: Критическая Статус: Подтверждена / Эксплуатирована Краткое описание...

inetutils-telnetd-cve-2026-24061

Обход аутентификации в GNU Inetutils Telnetd CVE-2026-24061 Я задокументировал свой разбор обхода аутентификации CVE-2026-24061 в GNU Inetutils telnetd с использованием лабораторной среды Hackviser...

CVE-2026-24061-POC

CVE-2026-24061 GNU inetutils-telnetd 원격 인증 우회 CVSS 점수: 9.8 치명적 개요 GNU inetutils-telnetd의 취약점으로 인해 원격 공격자가 NEWENVIRON 텔넷 옵션을 통해 인증을 우회할 수 있습니다. "-f root" 값을 포함하는 조작된 USER 환경 변수를 전송함으로써, 공격자는 자격 증명 없이 login 프로세스를 속여 루트 셸을 부여하도록 만들 수 있습니다. 영향을 받는 버전 2.6 이전의 GNU inetutils-telnetd 버전 기술적 세부 사항 telnetd...

CVE-2026-24061-telnet2root

CVE-2026-24061 Сканер уязвимостей и эксплойт 👨‍💻 Автор: Furkan KAYAPINAR @FurkanKAYAPINAR Обзор Этот репозиторий содержит сканер уязвимостей и интерактивный эксплойт для CVE-2026-24061. Эта уязвимость затрагивает inetutils-telnetd и потенциально другие реализации Telnet из-за некорректной обработки...

CVE-2026-67966

Tenda W20E V16.01.0.62782 /goform/telnet endpoint allows unauthenticated remote attackers to activate the Telnet daemon and obtain root shell access...

PT-2026-76794

Name of the Vulnerable Software and Affected Versions Tenda W20E version V16.01.0.62782 Description The '/goform/telnet' endpoint allows unauthenticated remote attackers to activate the Telnet daemon, which enables them to obtain root shell access to the device. Recommendations At the moment, the...

EUVD-2026-60538

Tenda W20E V16.01.0.62782 /goform/telnet endpoint allows unauthenticated remote attackers to activate the Telnet daemon and obtain root shell access...

CVE-2026-67966

Tenda W20E V16.01.0.62782 /goform/telnet endpoint allows unauthenticated remote attackers to activate the Telnet daemon and obtain root shell access...

CVE-2026-67966: Missing Authentication for Critical Function

Tenda W20E V16.01.0.62782 /goform/telnet endpoint allows unauthenticated remote attackers to activate the Telnet daemon and obtain root shell access...

CVE-2026-67966

Tenda W20E V16.01.0.62782 /goform/telnet endpoint allows unauthenticated remote attackers to activate the Telnet daemon and obtain root shell access...

Exploit for Argument Injection in Gnu Inetutils

CVE-2026-24061 CVE-2026-24061-PoC Overview An argument inj...

Exploit for Argument Injection in Gnu Inetutils

CVE-2026–24061 : GNU InetUtils telnetd Authentication Bypass...

CVE-2026-42376

D-Link DIR-456U Hardware Revision A1 End-of-Life, EOL contains a hardcoded telnet backdoor. The device starts a telnet daemon at boot via /etc/init0.d/S80telnetd.sh with the username "Alphanetworks" and the static password "whdrv01dlobdir456U" read from /etc/config/imagesign. The custom telnetd...

CVE-2026-35682

Anviz CX2 Lite is vulnerable to an authenticated command injection via a filename parameter that enables arbitrary command execution e.g., starting telnetd, resulting in root‑level access...

USN-8387-1: Inetutils vulnerabilities

It was discovered that the Inetutils telnet daemon incorrectly handled the CREDENTIALSDIRECTORY environment variable. An attacker could possibly use this issue to escalate privileges. CVE-2026-28372 It was discovered that the Inetutils telnet daemon did not properly validate buffer bounds when...

USN-8387-1 inetutils vulnerabilities

It was discovered that the Inetutils telnet daemon incorrectly handled the CREDENTIALSDIRECTORY environment variable. An attacker could possibly use this issue to escalate privileges. CVE-2026-28372 It was discovered that the Inetutils telnet daemon did not properly validate buffer bounds when...

📄 telnetd 2.7 Buffer Overflow

telnetd version 2.7 addslc remote buffer overflow exploit that achieves root. Exploit Title: telnetd 2.7 - Buffer Overflow Google Dork: N/A Date: 2026-04-03 Exploit Author: Jeff Barron jeffaf Vendor Homepage: https://www.gnu.org/software/inetutils/ Software Link: https://ftp.gnu.org/gnu/inetutils...

Updated krb5-appl packages fix security vulnerability

telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC Set Local Characters suboption handler because addslc does not check whether the buffer is full. CVE-2026-32746...

telnetd 2.7 - Buffer Overflow

Exploit Title: telnetd 2.7 - Buffer Overflow Google Dork: N/A Date: 2026-04-03 Exploit Author: Jeff Barron jeffaf Vendor Homepage: https://www.gnu.org/software/inetutils/ Software Link: https://ftp.gnu.org/gnu/inetutils/ Version: inetutils-telnetd through 2.7 patch pending in next release Tested...