Skip to content
Critical Remote Auth Bypass in GNU telnetd (CVE-2026-24061)

Critical Remote Auth Bypass in GNU telnetd (CVE-2026-24061)

First seen 29 Jan 2026, 22:53 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

CVE-2026-24061 is a remote authentication bypass vulnerability in GNU InetUtils telnetd, affecting versions 1.9.3 through 2.7. An unauthenticated attacker can exploit this flaw by supplying a specially crafted USER environment variable, allowing root-level access. The vulnerability has a CVSS score of 9.8.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 221d ago How this analysis works

More articles in this cluster (7)

Following this threat?

Track CVE-2026-20045 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed