
Bypass d’authentification Telnet menant à un accès root
CVE-2026-24061 is a critical vulnerability affecting certain implementations of telnetd, allowing an authentication bypass and the obtainment of a remote root shell without valid credentials.
This repository provides a Proof of Concept (PoC) for detecting vulnerable systems.
The script accepts several command-line options for scanning a single target or a file containing multiple targets.
| Option | Description |
|---|---|
-c, --cible | IP address or hostname to analyze |
-l, --liste | File containing a list of targets |
| Option | Default | Description |
|---|---|---|
-p, --port | 23 | Telnet port to test |
-d, --delai | 5 | Network timeout in seconds |
-u, --user | -f root | Loads "-f root" by default |
▶️ Usage
⚠️ Use this script only on systems for which you have explicit authorization.
python3 scan_telnet.py -c 192.168.1.1

python3 scan_telnet.py -l cibles.txt

0 → at least one vulnerable target1 → no vulnerability detected