Back to the CVE list
CVE-2026-24061 CISA KEV · Actively exploitedSuited to automated attack · CISA

Vulnerability in GNU Inetutils

CVSS score

9.8

EPSS probability

%99.0

Risk score

19.4

Published

9 mo ago

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

CVE-2026-24061 PoC

Public PoCSource updated: 16.10.2026 14:45:12

CVE-2026-24061

Public PoCSource updated: 16.10.2026 09:59:25

CVE-2026-24061 - GNU inetutils-telnetd Auth Bypass Exploit - Full Control with CRLF injection via NEW_ENVIRON leads to auth bypass & instant root shell. Single/Mass exploitation, multi-threading, custom port/user, pipe mode, session keep-alive, colored output, retries, timeout support. Python & Bash versions. Critical CVSS 9.8.

Public PoCSource updated: 14.10.2026 18:34:32

Telnet 2.7 Authentication Bypass and Privilege Escalation | Telnet 2.7 Kimlik doğrulama Zafiyeti Ve Yetki Yükseltme Saldırısı

Public PoCSource updated: 14.10.2026 17:45:43

🚨 Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.

Public PoCSource updated: 14.10.2026 07:06:50

ZeroDayEvil/CVE-2026-24061

Public PoCSource updated: 01.10.2026 02:46:04

CVE-2026-24061 GNU Inetutils Telnetd Authentication Bypass

Public PoCSource updated: 04.09.2026 13:54:51

A PoC exploit for CVE-2026-24061 - GNU InetUtils telnetd Argument Injection Authentication Bypass

Public PoCSource updated: 28.08.2026 20:18:15

CVE-2026-24061's poc : a critical authentication bypass in telnetd leading to RCE as root Affects systems with telnetd versions containing the vulnerability from 2015 onwards.

Public PoCSource updated: 13.10.2026 15:53:00

GNU InetUtils 2.6 - Telnetd Remote Privilege Escalation

Exploit referenceSource updated: 29.04.2026 00:00:00

https://www.labs.greynoise.io/grimoire/2026-01-22-f-around-and-find-out-18-hours-of-unsolicited-houseguests/index.html

Exploit reference

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-24061"