Critical GNU InetUtils telnetd Flaw Lets Attackers Bypass Login and Gain Root Access
GNU InetUtils telnetd contains a critical authentication-bypass (CVE-2026-24061) allowing unauthenticated remote root access in versions 1.9.3 through 2.7.
Ancient telnet bug happily hands out root to attackers
A trivial argument-injection in GNU InetUtils telnetd (CVE-2026-24061) allows remote attackers to bypass authentication and gain root access; active exploitation observed.