CVE-2026-24061-PoC-Telnetd

CVE-2026-24061 إثبات المفهوم PoC ⚠️ إخلاء مسؤولية: لأغراض تعليمية فقط ⚠️ يحتوي هذا المستودع على استغلال إثبات المفهوم PoC لثغرة CVE-2026-24061. وهو مخصص حصريًا للأغراض التعليمية ولاختبار الأنظمة في بيئة مختبرية خاضعة للتحكم. لا يتحمل المؤلف أي مسؤولية عن أي إساءة استخدام لهذا الكود. حول...

CVE-2026-24061

Contournement d'authentification dans GNU InetUtils telnetd via injection d'arguments - CVE-2026-24061 📚 Introduction Une vulnérabilité d'injection d'arguments récemment identifiée dans telnetd de GNU InetUtils permet à des attaquants de contourner l'authentification en définissant la variable...

CVE-2026-24061

CVE-2026-24061 Telnet RCE 익스플로잇 - SafeBreach Labs 제작 이 스크립트는 형식이 잘못된 USER 환경 변수를 사용하여 Telnet 서버의 CVE-2026-24061 취약점을 악용합니다. 사용법 대상 호스트로 스크립트를 실행합니다: root@kitploit: python telnetrce.py -p 인수 host: 대상 IP 주소 또는 호스트 이름 필수 -p, --port: 대상 포트 기본값: 23 예제 root@kitploit: python telnetrce.py 192.168.1.100...

CVE-2026-24061

CVE-2026-24061 - Обход аутентификации через инъекцию аргументов в telnetd GNU InetUtils Версии GNU InetUtils с 1.9.3 по 2.7 уязвимы к удаленному обходу аутентификации в сервере telnetd. Демон telnetd неправильно очищает переменную окружения USER перед передачей её в качестве аргумента командной...

CVE-2026-24061-GNU-InetUtils-telnetd

CVE-2026–24061 : GNU InetUtils telnetd Authentifizierungsbypass-Schwachstelle CVE-2026–24061 ist eine kritische Schwachstelle im telnetd-Dienst von GNU InetUtils CVE-ID : CVE-2026–24061 Schweregrad : Kritisch CVSS 9.8 Angriffsvektor : Netzwerk Erforderliche Authentifizierung : Keine Auswirkung :...

CVE-2026-24061

CVE-2026-24061-PoC ⚠ यह उपकरण केवल शैक्षिक उपयोग के लिए बनाया गया है। नियंत्रित वातावरण के बाहर अनधिकृत उपयोग सख्त वर्जित है। CVE-2026-24061 GNU Inetutils संस्करण 1.9.3–2.7 के telnetd में एक गंभीर कमजोरी CVSS 9.8 है जो एक दूरस्थ हमलावर को USER पर्यावरण चर के माध्यम से -f root पास करके प्रमाणीकरण ...

K000159869: Telnetd vulnerability CVE-2026-24061

Security Advisory Description Telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable. CVE-2026-24061 Impact There is no impact; F5 products are not affected by this vulnerability. Security Advisory Status F5 Product...

📄 GNU Inetutils 2.7 Telnet Authentication Bypass Scanner

GNU Inetutils version 2.7 telnet authentication bypass scanner that leverages a crafted USER value. This vulnerability is tracked as CVE-2026-24061 and is conceptually related to historical Telnet NEW-ENVIRON issues such as CVE-1999-0192, but affects modern GNU Inetutils implementations...

telnetd argument injection vulnerability

Added: 01/26/2026 Background The Telnet service allows remote users to authenticate to a system and use an interactive command shell. The Telnet service is implemented by the Telnet daemon, telnetd. Problem The telnetd program included in GNU Inetutils allows authentication to be bypassed with a ...

GNU Inetutils Telnet Authentication Bypass Exploit CVE-2026-24061

The telnetd service from GNU InetUtils is vulnerable to authentication-bypass, tracked as CVE-2026-24061, in versions up to version 2.7. During Telnet authentication the SB byte can be sent to indicate sub-negotiation which allows for the exchange of sub-option parameters after both parties have...

GNU InetUtils Argument Injection Vulnerability

GNU InetUtils contains an argument injection vulnerability in telnetd that could allow for remote authentication bypass via a "-f root" value for the USER environment variable...

SUSE CVE-2026-24061

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable...

Debian dsa-6106 : inetutils - security update

The remote Debian 12 / 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6106 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6106-1 [email protected] https://www.debian.org/security/...

GNU InetUtils Telnetd Remote Authentication Bypass Vulnerability

GNU InetUtils telnetd is a telnet service daemon in the GNU InetUtils suite that listens on TCP port 23 and provides clients with plaintext terminal access based on the Telnet protocol. A remote authentication bypass vulnerability exists in GNU InetUtils Telnetd, which can be exploited to bypass...

VulnCheck KEV: CVE-2026-24061

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable...

Vulnerability fixed in GNU Inetutils telnetd

Security researchers have found a a vulnerability in Inetutils telnetd version 2.7. This vulnerability has been present since version 1.9.3 that came out in 2015, according to the researchers. The vulnerability is in the way the telnetd service handles the USER environment variable. By setting th...

CVE-2026-24061

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable...

CVE-2026-24061

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable...

BIT-NODE-MIN-2023-30585

A vulnerability has been identified in the Node.js .msi version installation process, specifically affecting Windows users who install Node.js using the .msi installer. This vulnerability emerges during the repair operation, where the "msiexec.exe" process, running under the NT AUTHORITY\SYSTEM...

DIRAC: Unauthorized users can read proxy contents during generation

Impact During the proxy generation process e.g., when using dirac-proxy-init it is possible for unauthorized users on the same machine to gain read access to the proxy. This allows the user to then perform any action that is possible with the original proxy. This vulnerability only exists for a...