Loading CVE intelligence

CVE-2026-24061

CriticalPublished

GNU InetUtils Argument Injection Vulnerability

Published: Jan 21, 2026
Updated: Mar 25, 2026
Assigning CNA: mitre
Evidence observed: Jan 26, 2026

Primary CVSS

9.8/ 10Critical

nvd · CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS probability estimate

98.1%

High · next 30 days

Percentile: 99.9%
Model date: Sep 21, 2026

EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.

CISA Known Exploited

This CVE appears in the CISA Known Exploited Vulnerabilities catalog.

Summary

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable.

Sources

73

CVE-2026-24061-POCPoC
CVE-2026-24061's poc : a critical authentication bypass in telnetd leading to RCE as root Affects systems with telnetd versions containing the vulnerability from 2015 onwards.
CVE-2026-24061Exploit
Cross-platform remote code execution exploit for GNU Inetutils telnet (versions 1.9.3 to 2.7), targeting CVE-2026-24061 with a simple command-line interface.
CVE-2026-24061Exploit
CVE-2026-24061
CVE-2026-24061-lab

Responsible use

Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.

PoC

Reproduction lab for CVE-2026-24061, an authentication bypass in GNU InetUtils telnetd. Provides a Vagrant-based isolated environment and step-by-step exploitation instructions to demonstrate the root shell access.

CVE-2026-24061-PoC-TelnetdPoC

Proof-of-concept exploit for CVE-2026-24061, an unauthenticated remote root privilege escalation in inetutils-telnetd via USER environment variable manipulation. Includes Docker lab setup and reverse shell payload.

CVE-2026-24061Exploit

inetutils-telnetd Authentication Bypass - working

CVE-2026-24061Scanner

Deep technical analysis and scanner for CVE-2026-24061, a critical authentication bypass in GNU InetUtils telnetd, including exploit chain, PoC, and patch details.

inetutils-telnetd-cve-2026-24061Research

Walkthrough of the CVE-2026-24061 authentication bypass in GNU Inetutils telnetd, demonstrated in a Hackviser lab environment.

CVE-2026-24061Exploit

Proof-of-concept exploit for GNU Inetutils telnetd authentication bypass (CVE-2026-24061) with Docker lab setup and Go PoC. Exploits NEW-ENVIRON option to gain root shell.

telnetd_CVE-2026-24061_testerScanner

Python script to detect CVE-2026-24061 telnetd vulnerability via NEW-ENVIRON injection, providing risk assessment and mitigation guidance.

telnet_scanExploit

scanner/exploiter CVE-2026-24061 & CVE-2026-32746

CVE-2026-24061Exploit

GNU InetUtils telnetd - Unauthenticated Remote Root via NEW-ENVIRON Variable Injection.

CVE-2026-24061-telnet2rootExploit

Scanner and interactive exploit for CVE-2026-24061 in inetutils-telnetd, enabling pre-auth root access via crafted NEW-ENVIRON negotiation. Includes multi-threaded scanning and Docker lab.

CVE-2026-24061Exploit

Python exploit for CVE-2026-24061, allowing remote exploitation via IP and port arguments.

CVE-2026-24061-NSEScanner

The script performs a full Telnet negotiation mirroring the exact byte sequence of a real telnet -a client session.

CVE-2026-24061-payloadPoC

A PoC exploit for CVE-2026-24061 - GNU InetUtils telnetd Argument Injection Authentication Bypass

CVE-2026-24061PoC

Proof-of-concept exploit for Telnet NEW-ENVIRON authentication bypass vulnerability (CVE-2026-24061). Allows unauthorized access to vulnerable Telnet services.

CVE-2026-24061-TelnetdExploit

CVE-2026-24061 GNU Inetutils Telnetd Authentication Bypass

telnet-inetutils-auth-bypass-CVE-2026-24061PoC

This is a simple PoC that allows you to highlight the severity of the ongoing and actively exploited Telnet bug that is going on right now. Why people are still using Telnet... beyond me.

CVE-2026-24061-POCPoC

Proof-of-concept exploit for CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd via crafted NEW_ENVIRON USER variable, granting root shell without credentials.

CVE-2026-24061Exploit

A PoC exploit for CVE-2026-24061 - GNU InetUtils telnetd Argument Injection Authentication Bypass

scan-cve-2026-24061Scanner

Scans for CVE-2026-24061 telnetd auth bypass, generating payloads and verifying root access on vulnerable GNU inetutils telnetd devices.

inetutils-telnetd-auth-bypassPoC

A small docker lab to play with cve-2026-24061, the inetutils-telnetd authentication bypass.

CVE-2026-24061Exploit

Vulnerability in GNU InetUtils telnetd Enables Remote Root Access

Twenty-Three-ScannerScanner

CVE-2026-24061 - GNU InetUtils Telnetd Remote Authentication Bypass

CVE-2026-24061-GNU-Inetutils-telnetd-Remote-Authentication-Bypass-Root-Shell-Exploit

Proof-of-concept exploit for GNU Inetutils telnetd authentication bypass (CVE-2026-24061) that spawns a root shell via crafted NEW-ENVIRON USER variable.

Ashwesker-CVE-2026-24061Exploit

Exploit for CVE-2026-24061, a critical remote authentication bypass in GNU InetUtils telnetd, allowing unauthenticated root access via crafted environment variables.

CVE-2026-24061Scanner

Python-based scanner that detects CVE-2026-24061 in GNU Inetutils telnetd, allowing batch testing of multiple targets for the authentication bypass vulnerability.

CVE-2026-24061Scanner

Nuclei template for detecting CVE-2026-24061, a critical telnet argument injection in GNU inetutils telnetd allowing unauthenticated root access.

CVE-2026-24061-POCPoC

Proof-of-concept exploit for CVE-2026-24061 providing an interactive remote shell session with configurable timeouts for reliable exploitation.

GNU-Inetutils-telnet-CVE-2026-24061-Scanner

GNU Inetutils telnet remote authentication bypass vulnerability (CVE-2026-24061). This vulnerability stems from improper handling of environment variables in the GNU Inetutils telnetd component. An attacker can exploit this vulnerability by crafting a malicious USER environment variable and sending it to the affected telnet service, triggering the authentication bypass mechanism, thereby gaining root privileges directly without a password.

CVE-2026-24061Exploit

Exploit and scanner for CVE-2026-24061, a telnetd authentication bypass that grants root shell via crafted USER environment variable. Includes Docker environment setup and cross-platform exploit binaries.

CVE-2026-24061PoC

Proof-of-concept exploit for CVE-2026-24061, a telnetd authentication bypass via argument injection in the USER environment variable, allowing unauthenticated root shell access.

CVE-2026-24061Exploit

Proof of Concept: CVE-2026-24061 is a critical authentication bypass vulnerability in GNU inetutils-telnetd allowing unauthenticated remote attackers to gain instant root shell access via malicious NEW_ENVIRON telnet option exploitation.

CyberhawksLab-telnetCVEResearch

Writeup/finding of CVE-2026-24061 within the Cyberhawks lab

CVE-2026-24061PoC

Auth Bypass in inetutils-telnetd

CVE-2026-24061-PoC-ExploitPoC

Remote authentication bypass exploit for GNU inetutils-telnetd (CVE-2026-24061) using CRLF injection to gain instant root shell. Supports single/mass exploitation, multi-threading, custom ports, pipe mode, and session keep-alive.

CVE-2026-24061PoC

Educational Docker lab demonstrating Telnet NEW-ENVIRON username injection (CVE-2026-24061) with a Python client and vulnerable server for isolated security research.

CVE-2026-24061Scanner

Batch scanner for CVE-2026-24061 that scans multiple IPs/CIDRs for vulnerable services, with configurable ports, timeouts, and threading for efficient large-scale vulnerability detection.

CVE-2026-24061PoC

GNU telnetd service from GNU InetUtils authentication-bypass

CVE-2026-24061-ScannerExploit

Bash-based scanner for CVE-2026-24061 that performs subnet reconnaissance, banner grabbing, and active exploitation checks against GNU Inetutils telnetd to verify authentication bypass vulnerabilities.

Terrminus-CVE-2026-2406Exploit

AsyncIO Scanner & Exploitation Framework for CVE-2026-24061 (Telnet NEW_ENVIRON Auth Bypass). Features high-concurrency discovery, passive fingerprinting, and authorized root shell escalation

CVE-2026-24061Exploit

Exploitation of CVE-2026-24061

TelnetdBypass-Exploit

CVE-2026-24061 — GNU InetUtils Telnetd Authentication Bypass Scanner

CVE-2026-24061-POCPoC

CVE-2026-24061 - GNU InetUtils telnetd authentication bypass POC + Docker lab environment for testing

CVE-2026-24061-GNU-InetUtils-telnetdExploit

GNU-InetUtils-telnetd-Authentication-Bypass-Vulnerability

CVE-2026-24061Exploit

Python-based exploit for CVE-2026-24061, targeting a network service with customizable port and debug mode for security testing.

Telnet-TestVuln-CVE-2026-24061Research

Dockerized vulnerable Telnet service for testing CVE-2026-24061, providing a controlled environment for vulnerability validation and security research.

tscanExploit

Python-based scanner that detects and exploits CVE-2026-24061 telnetd authentication bypass, enabling root shell access on vulnerable GNU Inetutils services.

CVE-2026-24061---telnetdPoC

Bypass d’authentification Telnet menant à un accès root

CVE-2026-24061_LabPoC

Educational Docker lab demonstrating CVE-2026-24061, an authentication bypass in GNU telnetd allowing root access via argument injection in the USER environment variable.

CVE-2026-24061PoC

CVE-2026-24061-PoC

CVE-2026-24061PoC

CVE-2026-24061 exploit PoC

CVE-2026-24061Exploit

Multi-threaded Telnet vulnerability scanner that exploits CVE-2026-24061 via environment variable injection, verifies root access, and provides an interactive shell on compromised hosts.

telnet-CVE-2026-24061PoC

Proof-of-concept exploit for CVE-2026-24061, a telnet remote code execution vulnerability, with a terminal menu GUI for cross-device compatibility.

CVE-2026-24061-GUIExploit

CVE-2026-24061 GNU Inetutils telnetd Authentication Bypass Vulnerability Detection and Exploitation GUI Tool

CVE-2026-24061Exploit

GNU Inetutils telnetd Remote Authentication Bypass

Exploit-CVE-2026-24061Exploit

Bash-based exploit for CVE-2026-24061 targeting telnet service, providing payload execution for penetration testing and vulnerability verification.

CVE-2026-24061Exploit

🚨 Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.

Tell-Me-RootExploit

Batch scanner for CVE-2026-24061 Telnet authentication bypass, with port liveness checks and automated payload attempts for authorized penetration testing.

telnetd-cve-2026-24061PoC

Python exploit for CVE-2026-24061 targeting telnetd, providing proof-of-concept code for security testing and vulnerability demonstration.

CVE-2026-24061PoC

Proof-of-concept exploit for CVE-2026-24061, a Telnet NEW-ENVIRON RCE vulnerability, with Docker reproduction environment and Python detection script.

cve-2026-24061PoC

Proof-of-concept exploit for CVE-2026-24061, demonstrating the vulnerability and its impact.

CVE--2026-24061PoC

Dockerized proof-of-concept environment for CVE-2026-24061, targeting InetUtils telnetd vulnerability for security testing and research.

telnetdPoC

Perl-based proof-of-concept for telnetd CVE-2026-24061, demonstrating exploitation of the vulnerability.

CVE-2026-24061-setupPoC

Docker setup for CVE-2026-24061

AbyssalExploit

Abyssal is a high-performance Telnet vulnerability scanner for CVE-2026-24061, delivering root shells on vulnerable systems with false-positive detection.

CVE-2026-24061_POCPoC

POC Script for CVE-2026-24061 (GNU Telnetd Exploit)

CVE-2026-24061Exploit

Ruby-based exploit for CVE-2026-24061 that executes arbitrary commands on remote targets, supporting multi-threaded scanning and command injection for penetration testing.

1day-archiveResearch

Technical deep-dives and root cause analyses of recently disclosed CVEs - reverse engineering patches, building proof-of-concepts, and documenting exploitation techniques in the 1-day window.

CVE-2026-PoCsResearch

A community-curated, verified collection of Proof-of-Concept exploits for CVEs disclosed in 2026.

CVE-2026-24061PoC

Exploit code for CVE-2026-24061, a specific vulnerability, providing proof-of-concept or exploitation details.

GNU InetUtils 2.6 - Telnetd Remote Privilege EscalationExploit

aliguliyev · linux · Apr 29, 2026