0p5cur/cve-2026-24061-pocCVE-2026-24061's poc : a critical authentication bypass in telnetd leading to RCE as root Affects systems with telnetd versions containing the vulnerability from 2015 onwards.
Critical authentication bypass in
telnetdleading to RCE as root Affects systems with telnetd versions containing the vulnerability from 2015 onwards
This PoC demonstrates CVE-2026-24061, a critical authentication bypass vulnerability in telnetd that has existed undetected for 11 years. The vulnerability stems from improper handling of the USER environment variable in telnetd's login process. You can check the infamous commit that introduced the vulnerability here.
telnetd version: git clone https://github.com/0p5cur/CVE-2026-24061-POC
cd CVE-2026-24061-POC
python cve-2026-24061-poc.py <target_ip> <target_port>
disable telnetd entirely and use SSH instead