Known Exploited Vulnerabilities January 26, 2026 · CISA KEV Catalog

CVE-2026-24061: GNU Inet Utils Argument Injection Vulnerability

GNU InetUtils contains an argument injection vulnerability in telnetd that could allow for remote authentication bypass via a "-f root" value for the USER environment variable.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2026-24061 GNU
Related: CVE-2014-6278: GNU Bash OS Command Injection Vulnerability Known Exploited Vulnerabilities · Oct 02, 2025
CVE-2023-4911: GNU C Library Buffer Overflow Vulnerability Known Exploited Vulnerabilities · Nov 21, 2023
CVE-2014-7169: GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Known Exploited Vulnerabilities · Jan 28, 2022