CVE-2026-24061

CVE-2026-24061 - Inyección de Argumentos en Telnet Plantilla de Nuclei para la detección de la vulnerabilidad CVE-2026-24061 en GNU inetutils telnetd, que permite obtener acceso root sin autenticación. 📋 Descripción de la vulnerabilidad CVE-2026-24061 es una vulnerabilidad crítica de inyección de...

CVE-2026-24061

CVE-2026-24061: telnetd Authentication Bypass Vulnerability CVE-2026-24061 is an authentication bypass vulnerability in telnetd that allows attackers to bypass identity verification through specific combinations of environment variables and directly obtain a root-privileged shell. There is a flaw...

CVE-2026-24061-POC

CVE-2026-24061 GNU inetutils-telnetd Remote Authentication Bypass CVSS Score: 9.8 Critical Overview A vulnerability in GNU inetutils-telnetd allows remote attackers to bypass authentication via the NEWENVIRON telnet option. By sending a crafted USER environment variable containing the value "-f...

Exploit for Argument Injection in Gnu Inetutils

CVE-2026-24061 — GNU Inetutils Telnetd Authentication Bypass...

Exploit for Argument Injection in Gnu Inetutils

Original source:https://github.com/K3ysTr0K3R/CVE-2026-24061...

Exploit for Argument Injection in Gnu Inetutils

CVE-2026-24061 — Reproduction Lab ⚠️ For educational purp...

telnet-pocs-2026

All Telnet PoCs — Consolidated All proof-of-concept exploits...

Exploit for Classic Buffer Overflow in Gnu Inetutils

🚨 CVE-2026-32746 GNU Inetutils Telnetd RCE 🔥 📌 Res...

Astra Linux – Vulnerability in inetutils

In GNU inetutils via telnetd in version 2.7, privilege escalation is possible, which can be exploited by abusing the systemd service credentials support added to the login1 implementation of util-linux in version 2.40. This issue relates to client control over the CREDENTIALSDIRECTORY environment...

telnetd 2.7 - Buffer Overflow

Exploit Title: telnetd 2.7 - Buffer Overflow Google Dork: N/A Date: 2026-04-03 Exploit Author: Jeff Barron jeffaf Vendor Homepage: https://www.gnu.org/software/inetutils/ Software Link: https://ftp.gnu.org/gnu/inetutils/ Version: inetutils-telnetd through 2.7 patch pending in next release Tested...

📄 GNU InetUtils telnetd Remote Privilege Escalation

GNU InetUtils versions 2.0 through 2.6 telnetd remote privilege escalation proof of concept exploit. Exploit Title: GNU InetUtils telnetd - Remote Privilege Escalation Date: 2026-01-24 Exploit Author: Ali Guliyev infat0x Author GitHub: https://github.com/infat0x Vendor Homepage:...

CVE-2026-42375

D-Link DIR-600L Hardware Revision A1 End-of-Life contains a hardcoded telnet backdoor. The device starts a telnet daemon at boot via /bin/telnetd.sh with the username "Alphanetworks" and the static password "wrgn35dlwbrdir600l" read from /etc/alphaconfig/imagesign. The custom telnetd binary accep...

CVE-2026-42373

D-Link DIR-605L Hardware Revision B2 (End-of-Life) ships a hardcoded telnet backdoor. At boot, a telnet daemon starts via /bin/telnetd.sh with username "Alphanetworks" and a static password read from /etc/alpha_config/image_sign. The custom telnetd/login binaries validate credentials using strcmp...

GNU InetUtils 2.6 - Telnetd Remote Privilege Escalation

Exploit Title: GNU InetUtils telnetd - Remote Privilege Escalation Date: 2026-01-24 Exploit Author: Ali Guliyev infat0x Author GitHub: https://github.com/infat0x Vendor Homepage: https://www.gnu.org/software/inetutils/ Software Link: https://ftp.gnu.org/gnu/inetutils/ Version: GNU InetUtils 2.0...

Debian dla-4527 : inetutils-ftp - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4527 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4527-1 [email protected]...

CVE-2026-35682

Anviz CX2 Lite is vulnerable to an authenticated command injection via a filename parameter that enables arbitrary command execution e.g., starting telnetd, resulting in root‑level access...

CVE-2026-35682

Anviz CX2 Lite is vulnerable to an authenticated command injection via a filename parameter that enables arbitrary command execution e.g., starting telnetd, resulting in root‑level access...

[SECURITY] [DLA 4527-1] inetutils security update

Debian LTS Advisory DLA-4527-1 [email protected] https://www.debian.org/lts/security/ Andreas Henriksson April 11, 2026 https://wiki.debian.org/LTS Package : inetutils Version : 2:2.0-1+deb11u4 CVE ID : CVE-2026-28372 CVE-2026-32746 CVE-2026-32772 Debian Bug : 1130741 1130742 Several...

The vulnerability of the telnetd server of the inetutils network programming package allows a hacker to gain unauthorized access to protected information.

The vulnerability of the telnetd server of the inetutils network programming package is related to the lack of validation during the processing of incoming requests. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

[SECURITY] [DSA 6193-1] inetutils security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6193-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 03, 2026 https://www.debian.org/security/faq -...