telnetd argument injection vulnerability

Added: 01/26/2026 Background The Telnet service allows remote users to authenticate to a system and use an interactive command shell. The Telnet service is implemented by the Telnet daemon, telnetd. Problem The telnetd program included in GNU Inetutils allows authentication to be bypassed with a ...

GNU InetUtils Argument Injection Vulnerability

GNU InetUtils contains an argument injection vulnerability in telnetd that could allow for remote authentication bypass via a "-f root" value for the USER environment variable...

Exploit for CVE-2026-24061

GNU InetUtils telnetd Argument Injection Authentication Bypass...

Exploit for CVE-2026-24061

CVE-2026-24061 Vulnerable Lab ⚠️ WARNING: Intentionally...

[SECURITY] [DLA 4453-1] inetutils security update

Debian LTS Advisory DLA-4453-1 [email protected] https://www.debian.org/lts/security/ Andreas Henriksson January 25, 2026 https://wiki.debian.org/LTS Package : inetutils Version : 2:2.0-1+deb11u3 CVE ID : CVE-2026-24061 Debian Bug : 1126047 Kyu Neushwaistein aka Carlos Cortes Alvarez...

Exploit for CVE-2026-24061

CVE-2026-24061 – telnetd Authentication Bypass PoC !MIT Lice...

Exploit for CVE-2026-24061

CVE-2026-24061 GNU Inetutils telnetd Remote Authentication...

Exploit for CVE-2026-24061

CVE-2026-24061 - Telnet Argument Injection Nuclei template дл...

Debian dla-4453 : inetutils - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4453 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4453-1 [email protected] https://www.debian.org/lts/security/...

About Authentication Bypass – GNU Inetutils (CVE-2026-24061) vulnerability

About Authentication Bypass - GNU Inetutils CVE-2026-24061 vulnerability. GNU Inetutils is a collection of common network programs, including, among other things, a Telnet server telnetd. A vulnerability in GNU Inetutils telnetd allows a remote attacker to obtain a root shell on the host without...

Exploit for CVE-2026-24061

CVE-2026-24061 — inetutils-telnetd Authentication Bypass A pr...

Exploit for CVE-2026-24061

CVE-2026-24061 Vulnerability Detection Tool ⚠️ Note: C...

SUSE CVE-2026-24061

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable...

Critical GNU InetUtils telnetd Flaw Lets Attackers Bypass Login and Gain Root Access

A critical security flaw has been disclosed in the GNU InetUtils telnet daemon telnetd that went unnoticed for nearly 11 years. The vulnerability, tracked as CVE-2026-24061 , is rated 9.8 out of 10.0 on the CVSS scoring system. It affects all versions of GNU InetUtils from version 1.9.3 up to and...

Exploit for CVE-2026-24061

CVE-2026-24061 GNU inetutils-telnetd Remote Authentication By...

Exploit for CVE-2026-24061

CVE-2026-24061 GNU Inetutils telnetd Remote Authentication...

CVE-2026-24061

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable...

[SECURITY] [DSA 6106-1] inetutils security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6106-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 22, 2026 https://www.debian.org/security/faq -...

Debian dsa-6106 : inetutils - security update

The remote Debian 12 / 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6106 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6106-1 [email protected] https://www.debian.org/security/...

GNU InetUtils Telnetd Remote Authentication Bypass Vulnerability

GNU InetUtils telnetd is a telnet service daemon in the GNU InetUtils suite that listens on TCP port 23 and provides clients with plaintext terminal access based on the Telnet protocol. A remote authentication bypass vulnerability exists in GNU InetUtils Telnetd, which can be exploited to bypass...