Hackster
Critical Authentication Bypass Vulnerability in telnetd Disclosed
First seen 22 Jan 2026, 21:42 UTC
•
+5
•80% similarity
•54.4
Share:
Export
Ask AI about this cluster
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Cluster AI
Ask questions about this threat cluster with AI-powered analysis.
Get Researcher $29.99/moArticle Content
Browse articles
A critical vulnerability in the GNU InetUtils telnet daemon (telnetd), tracked as CVE-2026-24061, allows attackers to bypass authentication and gain root access. Disclosed on January 20, 2026, the flaw has existed for nearly 11 years and was introduced in a May 2015 update. Users still running telnetd are advised to patch immediately as attacks are already underway.
ThreatCluster AI
Timeline
2026-01-20
Vulnerability disclosed and tracked as CVE-2026-24061
2026-01-20
Exploit attempts observed from 15 unique IPs
2015-05
Vulnerability introduced in a telnetd update