CVE-2026-24061Critical· 9.8▾ Hadal⚠ Exploited in the wildPoC availabletelnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable.
▾ Hadal zone — Critical and actively exploited (CISA KEV / 0day)
impact 53.9 · likelihood 19.8 · exploitation 25
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 3 sources. Availability, not in-the-wild use.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Sep 29.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Federal remediation due Feb 16, 2026
99%
Last analysed / modified upstream
Exploit-DB · 69 GitHub repos · Metasploit ×1 (last check)
Added to the CISA catalog on Jan 26, 2026. Federal remediation due Feb 16, 2026. View catalog ↗
telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable.
inetutils >= 1.9.3, <= 2.7debian_linux = 11.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2023-4911High· 7.8A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable
CVE-2025-7546Medium· 5.3A vulnerability, which was classified as problematic, has been found in GNU Binutils 2.45
CVE-2025-7545Medium· 5.3A vulnerability classified as problematic was found in GNU Binutils 2.45
CVE-2025-5244Medium· 5.3A vulnerability was found in GNU Binutils up to 2.44
CVE-2025-3198Low· 3.3A vulnerability has been found in GNU Binutils 2.43/2.44 and classified as problematic
CVE-2024-0684Medium· 5.5A flaw was found in the GNU coreutils "split" program