CVE-2026-24061 GNU InetUtils
GNU InetUtils contains an argument injection vulnerability in telnetd that could allow for remote authentication bypass via a "-f root" value for the USER environment variable.
- CVSS
- not scored
On CISA’s exploited list
GNU InetUtils Argument Injection Vulnerability
- Added
- 2026-01-26
- Federal patch deadline
- 2026-02-16
- Ransomware use
- not known