CVE-2026-24061 1

Vulnerability (CVE)

CVE-2026-24061: GNU Inet Utils Argument Injection Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Jan 26, 2026

GNU InetUtils contains an argument injection vulnerability in telnetd that could allow for remote authentication bypass via a "-f root" value for the USER environment variable.

Vulnerabilities & Patching