CVE-2026-24061
CRITICAL
9,8
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high
Description
AI Translation Available
telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a '-f root' value for the USER environment variable.
EPSS (Exploit Prediction Scoring System)
Trend Analysis
EPSS (Exploit Prediction Scoring System)
Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.
EPSS Score
0,0041
Percentile
0,6th
Updated
EPSS Score Trend (Last 55 Days)
88
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
DraftCommon Consequences
Security Scopes Affected:
Confidentiality
Integrity
Availability
Other
Potential Impacts:
Execute Unauthorized Code Or Commands
Alter Execution Logic
Read Application Data
Modify Application Data
Applicable Platforms
Languages:
Not Language-Specific, PHP
Application
Inetutils by Gnu
Version Range Affected
From
1.9.3
(inclusive)
To
2.7
(inclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:gnu:inetutils:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System
Debian Linux by Debian
CPE Identifier
View Detailed Analysis
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026…
https://www.labs.greynoise.io/grimoire/2026-01-22-f-around-and-find-out-18-hour…
https://www.openwall.com/lists/oss-security/2026/01/20/2#:~:[email protected]%3A~%…
https://lists.debian.org/debian-lts-announce/2026/01/msg00025.html
http://www.openwall.com/lists/oss-security/2026/01/22/1
https://codeberg.org/inetutils/inetutils/commit/ccba9f748aa8d50a38d7748e2e60362…
https://codeberg.org/inetutils/inetutils/commit/fd702c02497b2f398e739e3119bed0b…
https://lists.gnu.org/archive/html/bug-inetutils/2026-01/msg00004.html
https://www.gnu.org/software/inetutils/
https://www.openwall.com/lists/oss-security/2026/01/20/2
https://www.openwall.com/lists/oss-security/2026/01/20/8
https://www.vicarius.io/vsociety/posts/cve-2026-24061-detection-script-remote-a…
https://www.vicarius.io/vsociety/posts/cve-2026-24061-mitigation-script-remote-…