cve-2026-32746

CVE-2026-32746 - telnetd LINEMODE SLC Buffer Overflow Pre-authentication buffer overflow in GNU InetUtils telnetd's LINEMODE SLC Set Local Characters handler. CVSS 3.1: 9.8 Critical | CWE: CWE-120, CWE-787 Overview The addslc function in telnetd/slc.c appends 3 bytes per SLC triplet to a fixed...

CVE-2026-24061-POC

CVE-2026-24061 GNU inetutils-telnetd Remote Authentication Bypass CVSS Score: 9.8 Critical Overview A vulnerability in GNU inetutils-telnetd allows remote attackers to bypass authentication via the NEWENVIRON telnet option. By sending a crafted USER environment variable containing the value "-f...

CVE-2014-0196

See https://vulners.com/cve/CVE-2014-0196...

CVE-2026-24061-Telnetd

CVE-2026-24061 GNU Inetutils Telnetd Authentication Bypass CVE: CVE-2026-24061 Severity: Critical CVSS: 9.8 Critical CWE: CWE-88 — Improper Neutralization of Argument Delimiters in a Command Affected Component: GNU Inetutils telnetd Affected Versions: 1.9.3 through 2.7 Overview CVE-2026-24061 is ...

CVE-2026-24061-setup

CVE-2026-24061 Setup This repository contains the Docker setup for CVE-2026-24061. Once you have installed Docker, just do the following: 1. Clone this repository. 2. Run the following command: sudo docker build . --tag telnetd-auth-bypass 3. Once the docker image is built, we can start the...

CVE-2026-24061

CVE-2026-24061: GNU InetUtils telnetd Argument Injection Overview An argument injection vulnerability affects the GNU InetUtils Telnet daemon telnetd. Insufficient sanitization of client-supplied environment variables during NEWENVIRON negotiation allows an attacker to inject command-line flags...

CVE-2026-24061-lab

CVE-2026-24061 — Reproduction Lab ⚠️ For educational purposes only. Isolated lab environment. Français ci-dessous Summary Critical authentication bypass CVSS 9.8 in GNU InetUtils telnetd ≤ 2.7. By injecting -f root as the USER variable via the Telnet NEWENVIRON option, an unauthenticated attacker...

cve-2011-4862

cve-2011-4862 I originally tried to use diff to make a patch. I patched it the way I thought it would be, before looking at the real patch. encrypt.patch is this original patch that I made with teh diff. However, when we tried applying this patch to freeBSD, it would not accept it. Instead, we ha...

CVE-2026-24061

🔒 CVE-2026-24061 - Exploit Critical Authentication Flaw 🚀 Getting Started Welcome to the CVE-2026-24061 project. This application demonstrates a critical security flaw. It allows attackers to bypass authentication in GNU inetutils-telnetd. This README will guide you through downloading and runnin...

CVE-2026-24061

GNU InetUtils telnetd Authentication Bypass via Argument Injection - CVE-2026-24061 📚 Introduction A recently identified argument injection vulnerability in GNU InetUtils telnetd allows attackers to circumvent authentication by setting the USER environment variable to the value “-f root”. As a...

CVE-2026-24061-NSE

CVE-2026-24061 — GNU InetUtils telnetd Authentication Bypass Nmap NSE Detection Script Overview This Nmap NSE script detects CVE-2026-24061 , an authentication bypass vulnerability in GNU InetUtils telnetd versions 1.9.3 through 2.7. By sending a crafted USER environment variable of the form -f...

inetutils-telnetd-auth-bypass

inetutils-telnetd auth bypass lab, CVE-2026-24061 A small lab to play with the auth bypass in inetutils-telnetd 1.9.3 - 2.7 as disclosed on the oss-sec mailing list. 0 This container relies on the fact that inetutils-telnetd is still a vulnerable version in Debian 11 Bullseye. At the time of...

watchtowr-vs-telnetd-CVE-2026-32746

watchtowr-vs-telnetd-CVE-2026-32746 Detection Artifact Generator for telnetd CVE-2026-32746. See our blog post for technical details. Detection in Action python watchtowr-vs-telnetd-CVE-2026-32746.py --rhost 127.0.0.1 / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / | | /...

CVE-2011-4862

CVE-2011-4862 Final Project for Security and Privacy CS 600.443 | Fall 2018 I originally tried to use diff to make a patch. I patched it the way I thought it would be, before looking at the real patch. encrypt.patch is this original patch that I made with teh diff. However, when we tried applying...

Twenty-Three-Scanner

🛰️ Twenty-Three Scanner A Powerful , Fast , and Elegant scanner for detecting vulnerable Telnetd services affected by CVE-2026-24061. Built with pure Python standard library - zero external dependencies required. -A32D2A?style=for-the-badge 🔗 Table of Contents ⚖️ License 🧩 Features ☣️ Vulnerability...

CVE-2026-24061_Lab

CVE-2026-24061 Telnetd Lab This repository contains a simple Docker lab to demonstrate the CVE-2026-24061 vulnerability. It allows authentication bypass and root access on GNU telnetd, on Linux. The purpose is exclusively educational. Requirements Docker installed Telnet Client installed Building...

CVE-2026-24061

CVE-2026-24061 GNU inetutils-telnetd - Remote Authentication Bypass A security research tool for exploiting CVE-2026-24061, a critical remote authentication bypass vulnerability in GNU inetutils-telnetd that allows instant root shell access without authentication. Table of Contents Vulnerability...

Abyssal

🔥 Abyssal CVE-2026-24061 Telnet Vulnerability Scanner & Exploit From the depths, we rise. Multi-threaded, false-positive detection, interactive root shell on success. 👨‍💻 About the Author This project was built by an experienced IT professional with decades of hands-on work in network security,...

CVE-2026-24061

🚨 CVE-2026-24061 — “TelneTD” Critical Remote Authentication Bypass in GNU Inetutils telnetd The ghost of 2015 just came back to own everything still running telnet. Zero authentication. One environment variable. Instant root shell. ⚠️ Overview CVE-2026-24061 is a critical remote privilege...

CVE-2026-24061-payload

Original source:https://github.com/K3ysTr0K3R/CVE-2026-24061 CVE-2026-24061 - GNU InetUtils telnetd Argument Injection Authentication Bypass GNU InetUtils versions 1.9.3 through 2.7 are vulnerable to a remote authentication bypass vulnerability in the telnetd server. The telnetd daemon fails to...