Researchers warn of unpatched, critical Telnetd flaw affecting all versions
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-24061 | Argument Injection Authentication Bypass in GNU Inetutils telnetd | 9.8 | 99% | KEVPoC ×8 | KEV |
| CVE-2026-32746 | Out-of-Bounds Write in GNU inetutils telnetd Enables Unauthenticated RCE | 9.8 | 45% | PoC |
From the original article
2 min read at securityaffairs.com
CVE-2026-32746 is a critical flaw in GNU InetUtils telnetd that allows remote attackers to execute code with elevated privileges Cybersecurity company Dream disclosed a critical flaw, tracked as CVE-2026-32746 (CVSS score of 9. 8), in GNU InetUtils telnetd that lets unauthenticated remote attackers execute code with elevated privileges.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.