{"id":"CVE-2026-24061","aliases":["ALPINE-CVE-2026-24061","DEBIAN-CVE-2026-24061","DLA-4453-1","DSA-6106-1","EUVD-2026-3688","GHSA-pf97-p8ff-fj35","UBUNTU-CVE-2026-24061","USN-7992-1","USN-7992-2"],"status":"published","title":"telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a \"-f root\" value...","description":"telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a \"-f root\" value for the USER environment variable.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.98984,"percentile":0.99931,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":true},"cwes":["CWE-88"],"published":"2026-01-21T06:42:17Z","modified":"2026-11-03T06:33:01Z","kev":{"date_added":"2026-01-26","due_date":"2026-02-16","required_action":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2026-01-26"},{"source":"kev","since":"2026-01-26"}],"exploits":[{"source":"pocgithub","id":"leonjza/inetutils-telnetd-auth-bypass","title":"leonjza/inetutils-telnetd-auth-bypass","date":"2026-01-21","url":"https://github.com/leonjza/inetutils-telnetd-auth-bypass"},{"source":"pocgithub","id":"Chocapikk/CVE-2026-24061","title":"Chocapikk/CVE-2026-24061","date":"2026-01-22","url":"https://github.com/Chocapikk/CVE-2026-24061"},{"source":"pocgithub","id":"JayGLXR/CVE-2026-24061-POC","title":"JayGLXR/CVE-2026-24061-POC","date":"2026-01-22","url":"https://github.com/JayGLXR/CVE-2026-24061-POC"},{"source":"pocgithub","id":"SafeBreach-Labs/CVE-2026-24061","title":"SafeBreach-Labs/CVE-2026-24061","date":"2026-01-22","url":"https://github.com/SafeBreach-Labs/CVE-2026-24061"},{"source":"pocgithub","id":"TryA9ain/CVE-2026-24061","title":"TryA9ain/CVE-2026-24061","date":"2026-01-22","url":"https://github.com/TryA9ain/CVE-2026-24061"},{"source":"pocgithub","id":"duy-31/CVE-2026-24061---telnetd","title":"duy-31/CVE-2026-24061---telnetd","date":"2026-01-22","url":"https://github.com/duy-31/CVE-2026-24061---telnetd"},{"source":"pocgithub","id":"h3athen/CVE-2026-24061","title":"h3athen/CVE-2026-24061","date":"2026-01-22","url":"https://github.com/h3athen/CVE-2026-24061"},{"source":"pocgithub","id":"parameciumzhang/Tell-Me-Root","title":"parameciumzhang/Tell-Me-Root","date":"2026-01-22","url":"https://github.com/parameciumzhang/Tell-Me-Root"},{"source":"pocgithub","id":"balgan/CVE-2026-24061","title":"balgan/CVE-2026-24061","date":"2026-01-23","url":"https://github.com/balgan/CVE-2026-24061"},{"source":"pocgithub","id":"monstertsl/CVE-2026-24061","title":"monstertsl/CVE-2026-24061","date":"2026-01-23","url":"https://github.com/monstertsl/CVE-2026-24061"},{"source":"pocgithub","id":"r00tuser111/CVE-2026-24061","title":"r00tuser111/CVE-2026-24061","date":"2026-01-23","url":"https://github.com/r00tuser111/CVE-2026-24061"},{"source":"pocgithub","id":"sh4den/CVE-2026-24061","title":"sh4den/CVE-2026-24061","date":"2026-01-23","url":"https://github.com/sh4den/CVE-2026-24061"},{"source":"pocgithub","id":"xuemian168/CVE-2026-24061","title":"xuemian168/CVE-2026-24061","date":"2026-01-23","url":"https://github.com/xuemian168/CVE-2026-24061"},{"source":"pocgithub","id":"0p5cur/CVE-2026-24061-POC","title":"0p5cur/CVE-2026-24061-POC","date":"2026-01-24","url":"https://github.com/0p5cur/CVE-2026-24061-POC"},{"source":"pocgithub","id":"Alter-N0X/CVE-2026-24061-POC","title":"Alter-N0X/CVE-2026-24061-POC","date":"2026-01-24","url":"https://github.com/Alter-N0X/CVE-2026-24061-POC"},{"source":"pocgithub","id":"BrainBob/CVE-2026-24061","title":"BrainBob/CVE-2026-24061","date":"2026-01-24","url":"https://github.com/BrainBob/CVE-2026-24061"},{"source":"pocgithub","id":"BrainBob/Telnet-TestVuln-CVE-2026-24061","title":"BrainBob/Telnet-TestVuln-CVE-2026-24061","date":"2026-01-24","url":"https://github.com/BrainBob/Telnet-TestVuln-CVE-2026-24061"},{"source":"pocgithub","id":"Mr-Zapi/CVE-2026-24061","title":"Mr-Zapi/CVE-2026-24061","date":"2026-01-24","url":"https://github.com/Mr-Zapi/CVE-2026-24061"},{"source":"pocgithub","id":"madfxr/Twenty-Three-Scanner","title":"madfxr/Twenty-Three-Scanner","date":"2026-01-24","url":"https://github.com/madfxr/Twenty-Three-Scanner"},{"source":"pocgithub","id":"midox008/CVE-2026-24061","title":"midox008/CVE-2026-24061","date":"2026-01-24","url":"https://github.com/midox008/CVE-2026-24061"},{"source":"pocgithub","id":"shivam-bathla/CVE-2026-24061-setup","title":"shivam-bathla/CVE-2026-24061-setup","date":"2026-01-24","url":"https://github.com/shivam-bathla/CVE-2026-24061-setup"},{"source":"pocgithub","id":"z3n70/CVE-2026-24061","title":"z3n70/CVE-2026-24061","date":"2026-01-24","url":"https://github.com/z3n70/CVE-2026-24061"},{"source":"pocgithub","id":"Mefhika120/Ashwesker-CVE-2026-24061","title":"Mefhika120/Ashwesker-CVE-2026-24061","date":"2026-01-25","url":"https://github.com/Mefhika120/Ashwesker-CVE-2026-24061"},{"source":"pocgithub","id":"infat0x/CVE-2026-24061","title":"infat0x/CVE-2026-24061","date":"2026-01-25","url":"https://github.com/infat0x/CVE-2026-24061"},{"source":"pocgithub","id":"ms0x08-dev/CVE-2026-24061-POC","title":"ms0x08-dev/CVE-2026-24061-POC","date":"2026-01-25","url":"https://github.com/ms0x08-dev/CVE-2026-24061-POC"},{"source":"metasploit","id":"exploit/linux/telnet/gnu_inetutils_auth_bypass","title":"GNU Inetutils Telnet Authentication Bypass Exploit CVE-2026-24061","type":"exploit","platform":"Linux,Unix","date":"2026-01-26","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/linux/telnet/gnu_inetutils_auth_bypass"},{"source":"exploitdb","id":"EDB-52524","title":"GNU InetUtils 2.6 - Telnetd Remote Privilege Escalation","type":"local","platform":"linux","date":"2026-04-29","url":"https://www.exploit-db.com/exploits/52524"}],"exploits_more":41,"fixes":[{"ecosystem":"Alpine:v3.24","package":"inetutils-telnet","fixed_in":["2.8-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"inetutils","fixed_in":["2:2.4-2+deb12u2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"inetutils","fixed_in":["2:2.6-3+deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"inetutils","fixed_in":["2:2.7-2"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"inetutils","fixed_in":["2:2.0-1+deb11u3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"inetutils","fixed_in":["2:1.9.4-1ubuntu0.1~esm5"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"inetutils","fixed_in":["2:1.9.4-3ubuntu0.1+esm4"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"inetutils","fixed_in":["2:1.9.4-11ubuntu0.2+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"inetutils","fixed_in":["2:2.2-2ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"inetutils","fixed_in":["2:2.5-3ubuntu4.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"inetutils","fixed_in":["2:2.6-1ubuntu3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.24","package":"inetutils-telnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"inetutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.4-2+deb12u2"}]}],"versions":["2:2.4-2","2:2.4-2+deb12u1"]},{"source":"osv","ecosystem":"Debian:13","package":"inetutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.6-3+deb13u1"}]}],"versions":["2:2.6-3"]},{"source":"osv","ecosystem":"Debian:14","package":"inetutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.7-2"}]}],"versions":["2:2.6-3","2:2.6-4","2:2.7-1"]},{"source":"osv","ecosystem":"Debian:11","package":"inetutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0-1+deb11u3"}]}],"versions":["2:2.0-1","2:2.0-1+deb11u1","2:2.0-1+deb11u2"]},{"source":"osv","ecosystem":"Debian:12","package":"inetutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.4-2+deb12u2"}]}],"versions":["2:2.4-2","2:2.4-2+deb12u1"]},{"source":"osv","ecosystem":"Debian:13","package":"inetutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.6-3+deb13u1"}]}],"versions":["2:2.6-3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"inetutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.9.4-1ubuntu0.1~esm5"}]}],"versions":["2:1.9.4-1","2:1.9.4-1build1","2:1.9.4-1ubuntu0.1~esm1","2:1.9.4-1ubuntu0.1~esm2","2:1.9.4-1ubuntu0.1~esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"inetutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.9.4-3ubuntu0.1+esm4"}]}],"versions":["2:1.9.4-2build1","2:1.9.4-3","2:1.9.4-3ubuntu0.1","2:1.9.4-3ubuntu0.1+esm1","2:1.9.4-3ubuntu0.1+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"inetutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.9.4-11ubuntu0.2+esm3"}]}],"versions":["2:1.9.4-10build1","2:1.9.4-11","2:1.9.4-11ubuntu0.1","2:1.9.4-11ubuntu0.1+esm1","2:1.9.4-11ubuntu0.2","2:1.9.4-11ubuntu0.2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"inetutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2-2ubuntu0.2"}]}],"versions":["2:2.0-1","2:2.2-2","2:2.2-2ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"inetutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.5-3ubuntu4.1"}]}],"versions":["2:2.4-2ubuntu2","2:2.4-3ubuntu1","2:2.5-3ubuntu1","2:2.5-3ubuntu3","2:2.5-3ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"inetutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.6-1ubuntu3.1"}]}],"versions":["2:2.5-6ubuntu1","2:2.6-1ubuntu1","2:2.6-1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"inetutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2-2ubuntu0.2"}]}],"versions":["2:2.0-1","2:2.2-2","2:2.2-2ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"inetutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.5-3ubuntu4.1"}]}],"versions":["2:2.4-2ubuntu2","2:2.4-3ubuntu1","2:2.5-3ubuntu1","2:2.5-3ubuntu3","2:2.5-3ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"inetutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.6-1ubuntu3.1"}]}],"versions":["2:2.5-6ubuntu1","2:2.6-1ubuntu1","2:2.6-1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"inetutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.9.4-1ubuntu0.1~esm5"}]}],"versions":["2:1.9.4-1","2:1.9.4-1build1","2:1.9.4-1ubuntu0.1~esm1","2:1.9.4-1ubuntu0.1~esm2","2:1.9.4-1ubuntu0.1~esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"inetutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.9.4-3ubuntu0.1+esm4"}]}],"versions":["2:1.9.4-2build1","2:1.9.4-3","2:1.9.4-3ubuntu0.1","2:1.9.4-3ubuntu0.1+esm1","2:1.9.4-3ubuntu0.1+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"inetutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.9.4-11ubuntu0.2+esm3"}]}],"versions":["2:1.9.4-10build1","2:1.9.4-11","2:1.9.4-11ubuntu0.1","2:1.9.4-11ubuntu0.1+esm1","2:1.9.4-11ubuntu0.2","2:1.9.4-11ubuntu0.2+esm1"]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"gnu","product":"inetutils"}],"references":[{"url":"https://www.openwall.com/lists/oss-security/2026/01/20/2","tags":["Mailing List","article","report"]},{"url":"https://www.openwall.com/lists/oss-security/2026/01/20/8","tags":["Mailing List","article","report"]},{"url":"https://www.gnu.org/software/inetutils/","tags":["Product","web","report"]},{"url":"https://lists.gnu.org/archive/html/bug-inetutils/2026-01/msg00004.html","tags":["Mitigation","Vendor Advisory","advisory","report"]},{"url":"https://codeberg.org/inetutils/inetutils/commit/fd702c02497b2f398e739e3119bed0b23dd7aa7b","tags":["Patch","fix"]},{"url":"https://codeberg.org/inetutils/inetutils/commit/ccba9f748aa8d50a38d7748e2e60362edd6a32cc","tags":["Patch","fix"]},{"url":"https://www.vicarius.io/vsociety/posts/cve-2026-24061-detection-script-remote-authentication-bypass-in-gnu-inetutils-package","tags":["Third Party Advisory","advisory"]},{"url":"https://www.vicarius.io/vsociety/posts/cve-2026-24061-mitigation-script-remote-authentication-bypass-in-gnu-inetutils-package","tags":["Mitigation","Third Party Advisory","advisory"]},{"url":"https://redteam.ae/blog/cve-2026-24061-inetutils-telnetd-root-bypass","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2026/01/20/2#:~:text=root@...a%3A~%20USER='","tags":["exploit","Mailing List","Third Party Advisory","advisory"]},{"url":"https://www.labs.greynoise.io/grimoire/2026-01-22-f-around-and-find-out-18-hours-of-unsolicited-houseguests/index.html","tags":["third-party-advisory","Exploit","Third Party Advisory","evidence"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-24061","tags":["government-resource","US Government Resource","web"]},{"url":"http://www.openwall.com/lists/oss-security/2026/01/22/1","tags":["Mailing List","article"]},{"url":"https://lists.debian.org/debian-lts-announce/2026/01/msg00025.html","tags":["Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-24061"},{"url":"https://www.gnu.org/software/inetutils"},{"url":"https://github.com/advisories/GHSA-pf97-p8ff-fj35"},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-24061","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-24061","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-24061","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-24061","tags":["report"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7992-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7992-2","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-24061","description":"telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a \"-f root\" value for the USER environment variable.","status":"published","published":"2026-01-21T06:42:17.134Z","modified":"2026-09-29T19:43:14.235Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-88"],"updated_at":"2026-11-02T14:19:50.92611Z"}],"euvd":[{"id":"EUVD-2026-3688","description":"telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a \"-f root\" value for the USER environment variable.","status":"published","published":"2026-01-21T06:42:17Z","modified":"2026-09-29T19:43:14Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"exploited_since":"2026-01-26","updated_at":"2026-11-02T17:27:51.078545Z"}],"ghsa":[{"id":"GHSA-pf97-p8ff-fj35","title":"telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a \"-f root\" value...","description":"telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a \"-f root\" value for the USER environment variable.","status":"published","published":"2026-01-21T09:31:30Z","modified":"2026-09-29T21:32:35Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-88"],"updated_at":"2026-11-02T15:12:33.840327Z"}],"kev":[{"id":"CVE-2026-24061","title":"GNU InetUtils Argument Injection Vulnerability","description":"GNU InetUtils contains an argument injection vulnerability in telnetd that could allow for remote authentication bypass via a \"-f root\" value for the USER environment variable.","cwes":["CWE-88"],"kev":{"date_added":"2026-01-26","due_date":"2026-02-16","required_action":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:15.999436Z"}],"nvd":[{"id":"CVE-2026-24061","description":"telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a \"-f root\" value for the USER environment variable.","status":"published","published":"2026-01-21T07:16:01.597Z","modified":"2026-09-30T11:47:02.427Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-88"],"updated_at":"2026-11-02T14:12:04.423757Z"}],"osv":[{"id":"ALPINE-CVE-2026-24061","description":"telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a \"-f root\" value for the USER environment variable.","status":"published","published":"2026-01-21T07:16:01.597Z","modified":"2026-11-03T06:33:01.800121986Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T07:15:53.944853Z"},{"id":"CVE-2026-24061","description":"telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a \"-f root\" value for the USER environment variable.","status":"published","published":"2026-01-21T07:16:01.597Z","modified":"2026-03-15T22:52:30.436405Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:59.079784Z"},{"id":"DEBIAN-CVE-2026-24061","description":"telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a \"-f root\" value for the USER environment variable.","status":"published","published":"2026-01-21T07:16:01.597Z","modified":"2026-10-01T08:47:33.257812371Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:53.877573Z"},{"id":"UBUNTU-CVE-2026-24061","description":"telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a \"-f root\" value for the USER environment variable.","status":"published","published":"2026-01-21T07:16:00Z","modified":"2026-02-19T20:29:26.95928Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:56:08.726452Z"},{"id":"DLA-4453-1","title":"inetutils - security update","status":"published","published":"2026-01-25T00:00:00Z","modified":"2026-01-25T00:29:58.529999Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"DSA-6106-1","title":"inetutils - security update","status":"published","published":"2026-01-22T00:00:00Z","modified":"2026-01-22T08:30:05.302607Z","updated_at":"2026-11-02T15:46:18.296714Z"},{"id":"USN-7992-1","title":"inetutils vulnerability","description":"Kyu Neushwaistein discovered that telnetd in Inetutils incorrectly handled\ncertain environment variables. A remote attacker could use this issue to\nbypass authentication and open a session as an administrator.","status":"published","published":"2026-02-02T12:58:39Z","modified":"2026-02-10T04:50:48Z","updated_at":"2026-11-02T16:58:22.951676Z"},{"id":"USN-7992-2","title":"inetutils vulnerability","description":"USN-7992-1 fixed vulnerabilities in telnetd in Inetutils. This update\nprovides the corresponding update for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS,\nand Ubuntu 20.04 LTS.\n\nOriginal advisory details:\n\n Kyu Neushwaistein discovered that telnetd in Inetutils incorrectly handled\n certain environment variables. A remote attacker could use this issue to\n bypass authentication and open a session as an administrator.","status":"published","published":"2026-02-18T17:02:47Z","modified":"2026-06-25T13:32:31.615660869Z","updated_at":"2026-11-02T16:58:22.951676Z"}]}}