CVE-2026-24061-Scanner

CVE-2026-24061 Scanner: GNU Inetutils Telnet Exploit Checker CVE-2026-24061 Scanner は、GNU Inetutils パッケージの telnetd サービスにおける 認証バイパス の脆弱性に対する検出（ reconnaissance ）と能動的な検証（ active exploitation check ）を行う Bash Script ベースのツールです。 この脆弱性により、攻撃者は環境変数 USER を介した Argument Injection を利用して、パスワードなしで root...

Ashwesker-CVE-2026-24061

🚨 CVE-2026-24061 : GNU InetUtils telnetd における重大なリモート認証バイパス 🧠 概要 CVE-2026-24061 は、GNU InetUtils の telnetd サービスに影響を与える重大な脆弱性です。 システムのログインプロセスに渡される環境変数の不適切な処理を悪用することで、認証されていないリモート攻撃者が root としてログインできるようになります。 影響: システムの完全な乗っ取り。 深刻度: 🔥 Critical CVSS 9.8 🎯 影響を受けるバージョン GNU InetUtils telnetd バージョン: 1.9.3 ...

ssh-hardening

SSHの強化 Debian/Ubuntu でのSSHを一度にロックダウン：新しいポート、rootログイン禁止、鍵ベースの認証、オプションのUFWとFail2Ban。 表示される内容 スクリプトを実行すると、OSを検出し、設定を表示してから続行するかどうかを尋ねます： クイックスタート（ステップバイステップ） 1️⃣ gitのインストール（必要な場合） Debian/Ubuntuの場合： root@kitploit: sudo apt-get install -y git 2️⃣ リポジトリのクローンとフォルダへの移動 root@kitploit: rm -rf ssh-hardening...

Updated kbd packages fix a security vulnerability

Local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login. CVE-2026-72693...

SUSE SLES15 Security Update : kbd (SUSE-SU-2026:4207-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4207-1 advisory. This update for kbd fixes the following issue: - CVE-2026-72693: local privilege escalation in openvt due to incorrect process owner...

SUSE SLED15 / SLES15 Security Update : kbd (SUSE-SU-2026:4211-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4211-1 advisory. This update for kbd fixes the following issue: - CVE-2026-72693: local privilege escalation in openvt due to incorrect...

SUSE-SU-2026:4211-1 Security update for kbd

This update for kbd fixes the following issue: - CVE-2026-72693: local privilege escalation in openvt due to incorrect process owner verification that allows passwordless root login bsc1275441...

Security update for kbd

This update for kbd fixes the following issue: CVE-2026-72693: local privilege escalation in openvt due to incorrect process owner verification that allows passwordless root login bsc1275441. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

Security update for kbd

This update for kbd fixes the following issue: CVE-2026-72693: local privilege escalation in openvt due to incorrect process owner verification that allows passwordless root login bsc1275441. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

SUSE-SU-2026:4207-1 Security update for kbd

This update for kbd fixes the following issue: - CVE-2026-72693: local privilege escalation in openvt due to incorrect process owner verification that allows passwordless root login bsc1275441...

MiracleLinux 9 : kbd-2.4.0-12.el9_8 (AXSA:2026-1640:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1640:01 advisory. kbd: Local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login CVE-2026-72693 Tenable has extracted the...

Kbd: local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login

...

RLSA-2026:57597 Moderate: kbd security update

The kbd packages provide tools for managing console behavior on a Linux system, including the keyboard, screen fonts, virtual terminals, and font files. Security Fixes: kbd: Local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login CVE-2026-726...

RLSA-2026:57610 Moderate: kbd security update

The kbd packages provide tools for managing console behavior on a Linux system, including the keyboard, screen fonts, virtual terminals, and font files. Security Fixes: kbd: Local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login CVE-2026-726...

RockyLinux 9 : kbd (RLSA-2026:57610)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:57610 advisory. kbd: Local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login CVE-2026-72693 Tenable has extracted the...

AlmaLinux 9 : kbd (ALSA-2026:57610)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:57610 advisory. kbd: Local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login CVE-2026-72693 Tenable has extracted the...

RockyLinux 10 : kbd (RLSA-2026:57597)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:57597 advisory. kbd: Local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login CVE-2026-72693 Tenable has extracted the...

AlmaLinux 10 : kbd (ALSA-2026:57597)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:57597 advisory. kbd: Local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login CVE-2026-72693 Tenable has extracted the...

Moderate: Red Hat Security Advisory: kbd security update

An update for kbd is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

kbd: Local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login

openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context. In the documented kbrequest/init usage, the ownership test in authenticateuser relies on stat"/proc//fd/0". stat on /proc//fd/0 follows the symlink to the underlying TTY...