CVE-2026-24061-POC

CVE-2026-24061 GNU inetutils-telnetd 远程身份验证绕过 CVSS 评分：9.8 严重 概述 GNU inetutils-telnetd 中的一个漏洞允许远程攻击者通过 NEWENVIRON telnet 选项绕过身份验证。通过发送包含值 "-f root" 的特制 USER 环境变量，攻击者可以诱使登录进程在无需凭据的情况下授予 root shell。 受影响版本 早于 2.6 的 GNU inetutils-telnetd 版本 技术细节 telnetd 守护进程将 NEWENVIRON 协商中的 USER 环境变量直接传递给...

CyberhawksLab-telnetCVE

CyberHawks 实验室演示发现报告 致谢：SafeBreach-Labs CVE：CVE-2026-24061 实验室： Cyberhawks 实验室 目标： 10.1.1.1（demo.cyberhawks.lab） 发现编号： WU-08 日期： 2026-09-08 严重性： 严重 状态： 已确认 / 已利用 执行摘要 在对 Cyberhawks 实验室环境进行评估期间，发现目标主机（10.1.1.1）存在一个未经验证的远程代码执行（RCE）漏洞并成功利用。通过暴露的 Telnet 服务（TCP/23）利用 CVE-2026-24061，获得了 root 级别的交互式...

CVE-2026-24061

🔒 CVE-2026-24061 - 利用关键身份验证漏洞 🚀 快速开始 欢迎来到 CVE-2026-24061 项目。此应用程序演示了一个关键安全漏洞。它允许攻击者绕过 GNU inetutils-telnetd 中的身份验证。本 README 将指导您下载和运行该软件。 Download Now 📥 下载与安装 首先，请访问 Releases 页面下载应用程序。该页面将列出可用的最新文件。 访问 Releases 页面下载 下载步骤 1. 点击上面的链接访问 Releases 页面。 2. 找到最新版本的 CVE-2026-24061。 3...

inetutils-telnetd-cve-2026-24061

GNU Inetutils Telnetd 认证绕过（CVE-2026-24061） 我记录了在 Hackviser 的实验室环境中，针对 GNU Inetutils telnetd 中 CVE-2026-24061 认证绕过的完整演练过程。...

CVE-2026-24061-telnet2root

CVE-2026-24061 Vulnerability Scanner & Exploit 👨‍💻 Author: Furkan KAYAPINAR @FurkanKAYAPINAR Overview This repository contains a vulnerability scanner and an interactive exploit for CVE-2026-24061. This vulnerability affects inetutils-telnetd and potentially other Telnet implementations through...

CVE-2026-67966

Tenda W20E V16.01.0.62782 /goform/telnet endpoint allows unauthenticated remote attackers to activate the Telnet daemon and obtain root shell access...

PT-2026-76794

Name of the Vulnerable Software and Affected Versions Tenda W20E version V16.01.0.62782 Description The '/goform/telnet' endpoint allows unauthenticated remote attackers to activate the Telnet daemon, which enables them to obtain root shell access to the device. Recommendations At the moment, the...

EUVD-2026-60538

Tenda W20E V16.01.0.62782 /goform/telnet endpoint allows unauthenticated remote attackers to activate the Telnet daemon and obtain root shell access...

CVE-2026-67966

Tenda W20E V16.01.0.62782 /goform/telnet endpoint allows unauthenticated remote attackers to activate the Telnet daemon and obtain root shell access...

Exploit for Argument Injection in Gnu Inetutils

CVE-2026–24061 : GNU InetUtils telnetd Authentication Bypass...

CVE-2026-42376

D-Link DIR-456U Hardware Revision A1 End-of-Life, EOL contains a hardcoded telnet backdoor. The device starts a telnet daemon at boot via /etc/init0.d/S80telnetd.sh with the username "Alphanetworks" and the static password "whdrv01dlobdir456U" read from /etc/config/imagesign. The custom telnetd...

CVE-2026-35682

Anviz CX2 Lite is vulnerable to an authenticated command injection via a filename parameter that enables arbitrary command execution e.g., starting telnetd, resulting in root‑level access...

USN-8387-1: Inetutils vulnerabilities

It was discovered that the Inetutils telnet daemon incorrectly handled the CREDENTIALSDIRECTORY environment variable. An attacker could possibly use this issue to escalate privileges. CVE-2026-28372 It was discovered that the Inetutils telnet daemon did not properly validate buffer bounds when...

USN-8387-1 inetutils vulnerabilities

It was discovered that the Inetutils telnet daemon incorrectly handled the CREDENTIALSDIRECTORY environment variable. An attacker could possibly use this issue to escalate privileges. CVE-2026-28372 It was discovered that the Inetutils telnet daemon did not properly validate buffer bounds when...

📄 telnetd 2.7 Buffer Overflow

telnetd version 2.7 addslc remote buffer overflow exploit that achieves root. Exploit Title: telnetd 2.7 - Buffer Overflow Google Dork: N/A Date: 2026-04-03 Exploit Author: Jeff Barron jeffaf Vendor Homepage: https://www.gnu.org/software/inetutils/ Software Link: https://ftp.gnu.org/gnu/inetutils...

Updated krb5-appl packages fix security vulnerability

telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC Set Local Characters suboption handler because addslc does not check whether the buffer is full. CVE-2026-32746...

telnetd 2.7 - Buffer Overflow

Exploit Title: telnetd 2.7 - Buffer Overflow Google Dork: N/A Date: 2026-04-03 Exploit Author: Jeff Barron jeffaf Vendor Homepage: https://www.gnu.org/software/inetutils/ Software Link: https://ftp.gnu.org/gnu/inetutils/ Version: inetutils-telnetd through 2.7 patch pending in next release Tested...

CVE-2026-42376

D-Link DIR-456U Hardware Revision A1 End-of-Life, EOL contains a hardcoded telnet backdoor. The device starts a telnet daemon at boot via /etc/init0.d/S80telnetd.sh with the username "Alphanetworks" and the static password "whdrv01dlobdir456U" read from /etc/config/imagesign. The custom telnetd...

CVE-2026-42376

D-Link DIR-456U Hardware Revision A1 End-of-Life, EOL contains a hardcoded telnet backdoor. The device starts a telnet daemon at boot via /etc/init0.d/S80telnetd.sh with the username "Alphanetworks" and the static password "whdrv01dlobdir456U" read from /etc/config/imagesign. The custom telnetd...

CVE-2026-42374

D-Link DIR-600L Hardware Revision B1 End-of-Life contains a hardcoded telnet backdoor. The device starts a telnet daemon at boot via /bin/telnetd.sh with the username "Alphanetworks" and the static password "wrgn61dlwbrdir600L" read from /etc/alphaconfig/imagesign. The custom telnetd binary accep...