CVE-2026-24061

CVE-2026-24061 Exploit de RCE en Telnet - Por SafeBreach Labs Este script explota la vulnerabilidad CVE-2026-24061 en servidores Telnet mediante una variable de entorno USER malformada. Uso Ejecute el script con un host de destino: python telnetrce.py -p Argumentos host: Dirección IP o nombre de...

CVE-2026-24061

CVE-2026-24061-PoC ⚠ 此工具仅用于教育目的。严禁在受控环境之外未经授权使用。 CVE-2026-24061 是 GNU Inetutils（版本 1.9.3–2.7）中 telnetd 存在的一个严重漏洞（CVSS 9.8），允许远程攻击者通过 USER 环境变量传递 -f root，绕过身份验证并获得 root 访问权限。此工具旨在模拟对该漏洞的滥用。 系统要求 Windows 操作系统/Linux Python 3.4+ 使用方法 本 PoC 需要一个目标主机地址。提供方式有两种： 1. 编辑 payload.txt 文件 将你的 payload 插入...

CVE-2026-24061-Telnetd

CVE-2026-24061 GNU Inetutils Telnetd Authentication Bypass CVE: CVE-2026-24061 Severity: Critical CVSS: 9.8 Critical CWE: CWE-88 — Improper Neutralization of Argument Delimiters in a Command Affected Component: GNU Inetutils telnetd Affected Versions: 1.9.3 through 2.7 Overview CVE-2026-24061 is ...

CVE-2026-24061-GNU-InetUtils-telnetd

CVE-2026-24061：GNU InetUtils telnetd 认证绕过漏洞 CVE-2026-24061 是 GNU InetUtils 中 telnetd 服务的一个严重缺陷。 CVE 编号： CVE-2026-24061 严重程度： 严重 CVSS 9.8 攻击向量： 网络 是否需要认证： 否 影响： 系统完全沦陷（root 权限） 该漏洞源于在 Telnet 会话建立期间对 USER 环境变量的不当处理，该值被直接传递到 /usr/bin/login 的参数列表中，未经任何清理或验证，因此远程攻击者可以操纵此输入来注入命令行选项，从而有效绕过认证并立即获得 root...

CVE-2026-24061-PoC-Telnetd

CVE-2026-24061 Prueba de Concepto PoC ⚠️ AVISO: SOLO CON FINES EDUCATIVOS ⚠️ Este repositorio contiene un exploit de Prueba de Concepto PoC para CVE-2026-24061. Está destinado estrictamente a fines educativos y para probar sistemas en un entorno de laboratorio controlado. El autor no se hace...

CVE-2026-24061

Bypass de Autenticación en GNU InetUtils telnetd mediante Inyección de Argumentos - CVE-2026-24061 📚 Introducción Una vulnerabilidad de inyección de argumentos recientemente identificada en telnetd de GNU InetUtils permite a los atacantes eludir la autenticación estableciendo la variable de entor...

CVE-2026-24061

CVE-2026-24061 - GNU InetUtils telnetd 引数インジェクションによる認証回避 GNU InetUtils バージョン 1.9.3 から 2.7 は、telnetd サーバーにおけるリモート認証回避の脆弱性の影響を受けます。telnetd デーモンは、USER 環境変数を login1 プログラムにコマンドライン引数として渡す前に適切にサニタイズしません。telnet クライアントが -f root などのコマンドラインフラグを含む USER 環境変数を送信すると、telnetd はこのサニタイズされていない値をそのまま login...

K000159869: Telnetd vulnerability CVE-2026-24061

Security Advisory Description Telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable. CVE-2026-24061 Impact There is no impact; F5 products are not affected by this vulnerability. Security Advisory Status F5 Product...

📄 GNU Inetutils 2.7 Telnet Authentication Bypass Scanner

GNU Inetutils version 2.7 telnet authentication bypass scanner that leverages a crafted USER value. This vulnerability is tracked as CVE-2026-24061 and is conceptually related to historical Telnet NEW-ENVIRON issues such as CVE-1999-0192, but affects modern GNU Inetutils implementations...

telnetd argument injection vulnerability

Added: 01/26/2026 Background The Telnet service allows remote users to authenticate to a system and use an interactive command shell. The Telnet service is implemented by the Telnet daemon, telnetd. Problem The telnetd program included in GNU Inetutils allows authentication to be bypassed with a ...

GNU Inetutils Telnet Authentication Bypass Exploit CVE-2026-24061

The telnetd service from GNU InetUtils is vulnerable to authentication-bypass, tracked as CVE-2026-24061, in versions up to version 2.7. During Telnet authentication the SB byte can be sent to indicate sub-negotiation which allows for the exchange of sub-option parameters after both parties have...

GNU InetUtils Argument Injection Vulnerability

GNU InetUtils contains an argument injection vulnerability in telnetd that could allow for remote authentication bypass via a "-f root" value for the USER environment variable...

SUSE CVE-2026-24061

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable...

Debian dsa-6106 : inetutils - security update

The remote Debian 12 / 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6106 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6106-1 [email protected] https://www.debian.org/security/...

GNU InetUtils Telnetd Remote Authentication Bypass Vulnerability

GNU InetUtils telnetd is a telnet service daemon in the GNU InetUtils suite that listens on TCP port 23 and provides clients with plaintext terminal access based on the Telnet protocol. A remote authentication bypass vulnerability exists in GNU InetUtils Telnetd, which can be exploited to bypass...

VulnCheck KEV: CVE-2026-24061

GNU InetUtils contains an argument injection vulnerability in telnetd that could allow for remote authentication bypass via a "-f root" value for the USER environment variable...

Vulnerability fixed in GNU Inetutils telnetd

Security researchers have found a a vulnerability in Inetutils telnetd version 2.7. This vulnerability has been present since version 1.9.3 that came out in 2015, according to the researchers. The vulnerability is in the way the telnetd service handles the USER environment variable. By setting th...

CVE-2026-24061

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable...

CVE-2026-24061

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable...

CVE-2026-24061: Improper Neutralization of Argument Delimiters in a Command

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable...