CVE-2026-24061

Эксплойт CVE-2026-24061 Telnet RCE — от SafeBreach Labs Этот скрипт эксплуатирует уязвимость CVE-2026-24061 в Telnet-серверах, используя некорректно сформированную переменную окружения USER. Использование Запустите скрипт с указанием целевого хоста: python telnetrce.py -p Аргументы host: IP-адрес...

CVE-2026-24061

CVE-2026-24061-PoC ⚠ Cet outil est créé uniquement à des fins éducatives. Toute utilisation non autorisée en dehors d'environnements contrôlés est strictement interdite. CVE-2026-24061 est une vulnérabilité critique CVSS 9.8 dans telnetd de GNU Inetutils versions 1.9.3–2.7 qui permet à un attaqua...

CVE-2026-24061-PoC-Telnetd

CVE-2026-24061 Доказательство концепции PoC ⚠️ ОТКАЗ ОТ ОТВЕТСТВЕННОСТИ: ТОЛЬКО ДЛЯ ОБРАЗОВАТЕЛЬНЫХ ЦЕЛЕЙ ⚠️ Этот репозиторий содержит доказательство концепции PoC эксплойта для CVE-2026-24061. Он предназначен строго для образовательных целей и для тестирования систем в контролируемой лабораторной...

CVE-2026-24061

Обход аутентификации в GNU InetUtils telnetd через внедрение аргументов - CVE-2026-24061 📚 Введение Недавно выявленная уязвимость внедрения аргументов в GNU InetUtils telnetd позволяет злоумышленникам обойти аутентификацию, установив переменную окружения USER в значение «-f root». В результате...

CVE-2026-24061-Telnetd

CVE-2026-24061 GNU Inetutils Telnetd Authentication Bypass CVE: CVE-2026-24061 Severity: Critical CVSS: 9.8 Critical CWE: CWE-88 — Improper Neutralization of Argument Delimiters in a Command Affected Component: GNU Inetutils telnetd Affected Versions: 1.9.3 through 2.7 Overview CVE-2026-24061 is ...

CVE-2026-24061

CVE-2026-24061 - Обход аутентификации через инъекцию аргументов в telnetd GNU InetUtils Версии GNU InetUtils с 1.9.3 по 2.7 уязвимы к удаленному обходу аутентификации в сервере telnetd. Демон telnetd неправильно очищает переменную окружения USER перед передачей её в качестве аргумента командной...

CVE-2026-24061-GNU-InetUtils-telnetd

CVE-2026–24061 : Vulnérabilité de contournement d'authentification dans telnetd de GNU InetUtils CVE-2026–24061 est une faille critique dans le service telnetd de GNU InetUtils Identifiant CVE : CVE-2026–24061 Sévérité : Critique CVSS 9.8 Vecteur d'attaque : Réseau Authentification requise : Aucu...

K000159869: Telnetd vulnerability CVE-2026-24061

Security Advisory Description Telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable. CVE-2026-24061 Impact There is no impact; F5 products are not affected by this vulnerability. Security Advisory Status F5 Product...

📄 GNU Inetutils 2.7 Telnet Authentication Bypass Scanner

GNU Inetutils version 2.7 telnet authentication bypass scanner that leverages a crafted USER value. This vulnerability is tracked as CVE-2026-24061 and is conceptually related to historical Telnet NEW-ENVIRON issues such as CVE-1999-0192, but affects modern GNU Inetutils implementations...

GNU Inetutils Telnet Authentication Bypass Exploit CVE-2026-24061

The telnetd service from GNU InetUtils is vulnerable to authentication-bypass, tracked as CVE-2026-24061, in versions up to version 2.7. During Telnet authentication the SB byte can be sent to indicate sub-negotiation which allows for the exchange of sub-option parameters after both parties have...

telnetd argument injection vulnerability

Added: 01/26/2026 Background The Telnet service allows remote users to authenticate to a system and use an interactive command shell. The Telnet service is implemented by the Telnet daemon, telnetd. Problem The telnetd program included in GNU Inetutils allows authentication to be bypassed with a ...

GNU InetUtils Argument Injection Vulnerability

GNU InetUtils contains an argument injection vulnerability in telnetd that could allow for remote authentication bypass via a "-f root" value for the USER environment variable...

SUSE CVE-2026-24061

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable...

Debian dsa-6106 : inetutils - security update

The remote Debian 12 / 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6106 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6106-1 [email protected] https://www.debian.org/security/...

GNU InetUtils Telnetd Remote Authentication Bypass Vulnerability

GNU InetUtils telnetd is a telnet service daemon in the GNU InetUtils suite that listens on TCP port 23 and provides clients with plaintext terminal access based on the Telnet protocol. A remote authentication bypass vulnerability exists in GNU InetUtils Telnetd, which can be exploited to bypass...

VulnCheck KEV: CVE-2026-24061

GNU InetUtils contains an argument injection vulnerability in telnetd that could allow for remote authentication bypass via a "-f root" value for the USER environment variable...

Vulnerability fixed in GNU Inetutils telnetd

Security researchers have found a a vulnerability in Inetutils telnetd version 2.7. This vulnerability has been present since version 1.9.3 that came out in 2015, according to the researchers. The vulnerability is in the way the telnetd service handles the USER environment variable. By setting th...

CVE-2026-24061

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable...

CVE-2026-24061

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable...

CVE-2026-24061: Improper Neutralization of Argument Delimiters in a Command

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable...