CVE-2026-24061

CVE-2026-24061: GNU InetUtils telnetd 인증 우회 - 심층 분석 요약 CVE-2026-24061은 GNU InetUtils telnetd의 치명적인CVSS 9.8 원격 인증 우회 취약점으로, 인증되지 않은 공격자가 즉시 root 액세스 권한을 얻을 수 있습니다. 이 취약점은 /usr/bin/login에 명령줄 인자로 직접 전달되는 USER 환경 변수의 부적절한 검증에서 비롯됩니다. 공격자가 USER=-f root를 설정하면 login의 -f 플래그가 트리거되어 인증을 완전히 우회합니다. 영향을 받는...

CVE-2026-24061-Scanner

CVE-2026-24061 스캐너: GNU Inetutils Telnet 취약점 점검 도구 CVE-2026-24061 스캐너 는 GNU Inetutils 패키지의 telnetd 서비스에서 발생하는 인증 우회Authentication Bypass 취약점을 탐지reconnaissance하고 능동적으로 검증active exploitation check하기 위한 Bash 스크립트 기반 도구입니다. 이 취약점은 공격자가 USER 환경 변수를 통한 Argument Injection을 수행하여 비밀번호 없이 root로 로그인하도록 강제할 ...

cve-2026-80428-ctf

CVE-2026-80428 CTF Training Lab Educational emulator of the vulnerability mechanics described in CVE-2026-80428 CWE-502: Deserialization of Untrusted Data. This is not a real ILIAS installation and not a weaponized exploit package. It is a fully containerized, isolated laboratory for students,...

CVE-2026-24061

🚨 CVE-2026-24061 — “TelneTD” GNU Inetutils telnetd의 치명적인 원격 인증 우회 2015년의 유령이 돌아와 여전히 텔넷을 실행 중인 모든 것을 장악합니다. 인증 제로. 환경 변수 하나. 즉시 루트 쉘. ⚠️ 개요 CVE-2026-24061 은 GNU Inetutils telnetd ≤ 2.7 에서 발견된 심각한 원격 권한 상승 취약점입니다. 인증되지 않은 원격 공격자는 Telnet NEW-ENVIRON 옵션을 통해 USER 환경 변수를 "-f root"로 설정합니다. telnetd는 이를...

ESPHome Device Builder: Renamed auth env vars silently disable dashboard authentication on upgrade

SummaryThe dashboard reads its authentication credentials from $ESPHOMEUSERNAME and $ESPHOMEPASSWORD. Earlier versions, and the legacy esphome dashboard, read the bare $USERNAME and $PASSWORD instead. When the env vars were renamed the bare names were dropped with no fallback, so an operator who...

Malicious code in @hrmony/hyper-json-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8139053048172994cadd0251ef74e5104c489dcb4f0448153ea9342b3feb707 On module load, index.js performs top-level fetch to a hardcoded attacker-controlled endpoint at...

MAL-2026-17264 Malicious code in @hrmony/kit-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a4084c44ab6554d66c474338de2cb482a25b31e6822d470e08b2b2ef5b1735a The package executes credential-harvesting code both from its postinstall script scripts/check-setup.mjs and from its main entry index.js, so theft...

Malicious code in @hrmony/app-gateway-templates (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7d3f05113dd7daa9fac2da8187afecc751fafcf96449e7f4eb4a5d9a4878844 On require/import of @hrmony/app-gateway-templates, index.js the package main executes an exfiltration routine against a hardcoded attacker endpoint ...

Malicious code in @hrmony/benefit-sachbezug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de40a55476bbcc5eda275f9f385396699f1b066bf1ddedb80fad053c4057c63a The package's main entry index.js executes at require/import time and POSTs harvested data to the hardcoded endpoint...

Malicious code in @hrmony/pladddform-codegen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58f0706d7223f8a1ff87ac80c6e1e42af148214545e55acc865cce12fee7eec4 On module load, index.js unconditionally beacons to the hardcoded non-first-party endpoint...

MAL-2026-17275 Malicious code in @hrmony/pladddform-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9e61c4d5d499198c568d9f255e23b407eb7e47f7272c76bf5f50a0d0db31605 On top-level module load, index.js queries the AWS instance metadata service at 169.254.169.254 IMDSv2, retrieves the instance identity document,...

CVE-2026-100174 Stored Cross-Site Scripting (XSS) in AIL Framework Tag Selector via Unescaped Tag Names

The AIL Framework tag selector component var/www/static/js/tags.js is vulnerable to stored cross-site scripting XSS. A user with the ability to create a custom tag could embed an HTML payload containing JavaScript event handlers e.g., or in the tag name. When another authenticated user opened a...

CVE-2026-97922

In the Linux kernel, the following vulnerability has been resolved: tracing: Free histogram var refs regardless of how often they are referenced Using the same variable three or more times in one hist trigger leaks the variable reference and its strings when the trigger is removed. commit...

PT-2026-98726

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the btf var show function. This occurs because the function calls btf type id resolve unconditionally, which attempts to dereference btf-resolved ids...

PT-2026-98586

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the tracing component where using the same variable three or more times within a single histogram trigger causes a memory leak of the variable reference and its...

CVE-2026-100176: Improper Neutralization of Input During Web Page Generation

The AIL Framework's username timeline feature is vulnerable to stored cross-site scripting XSS. Usernames imported from chats and crawled forums are stored without character restrictions. When an authenticated analyst views the username timeline, the application renders these stored usernames int...

CVE-2026-95667 MISP Installer Log and FIFO Created World-Readable, Exposing Sensitive Credentials

The MISP installer scripts for Debian 12, Debian 13, Ubuntu 24.04, and RHEL 9.4 create a log file at /var/log/mispinstall.log and a named pipe FIFO at /var/log/mispinstall.log.pipe to capture all installer output. The log captures highly sensitive data including the generated admin password,...

CVE-2026-92591

Craft CMS 5.0.0 through 5.10.12 treats a database connection failure as meaning that Craft is not installed, which makes anonymous installer actions — including install/validate-site — reachable on an installed production site whenever PHP remains available but the configured MySQL endpoint does...

CVE-2026-59178

ESPHome Device Builder Dashboard is a dashboard for the ESPHome home management software. Prior to version 1.0.12, the dashboard reads its authentication credentials from $ESPHOMEUSERNAME and $ESPHOMEPASSWORD. Earlier versions, and the legacy esphome dashboard, read the bare $USERNAME and $PASSWO...

CVE-2026-59178 ESPHome Device Builder: Renamed auth env vars silently disable dashboard authentication on upgrade

ESPHome Device Builder Dashboard is a dashboard for the ESPHome home management software. Prior to version 1.0.12, the dashboard reads its authentication credentials from $ESPHOMEUSERNAME and $ESPHOMEPASSWORD. Earlier versions, and the legacy esphome dashboard, read the bare $USERNAME and $PASSWO...