CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2026-01-21
GNU Inetutils telnetd Remote Authentication Bypass and Root Privilege Escalation (CVE-2026-24061)
[Affected Scope] Systems running telnetd from GNU Inetutils versions up to and including 2.7.
[Impact] Remote attackers can bypass authentication and gain complete root access to the target system by injecting '-f root' into the USER environment variable.
[Mitigation] Apply the official vendor patches immediately, or disable the telnetd service and transition to secure protocols like SSH.