CVE-2026-24061

CriticalCVSS 9.8/10Known exploited (CISA KEV)Last modified Sep 30, 2026

Description

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-88

Affected software

No affected versions have been published.

Timeline

Published
Jan 21, 2026
Last modified
Sep 30, 2026
Added to CISA KEV
Jan 26, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-240627.8The "Privileged Helper" component of the Arturia Software Center (MacOS) does not perform sufficient client code signature validation when aCVE-2026-240638.2When a plugin is installed using the Arturia Software Center (MacOS), it also installs an uninstall.sh bash script in a root owned path. ThiCVE-2026-240647.8Waves Central for macOS versions 13.0.9 through 16.5.5 contain a local privilege escalation vulnerability. A trusted XPC client component inCVE-2026-240658.1Waves Central for macOS versions 13.0.9 through 16.5.5 contain a local privilege escalation vulnerability in the privileged helper service. CVE-2026-240668.4Slate Digital Connect 1.37.0 for macOS installs a privileged helper tool, com.slatedigital.connect.privileged.helper.tool, which exposes theCVE-2026-240678.4Slate Digital Connect 1.37.0 for macOS installs a privileged helper tool, com.slatedigital.connect.privileged.helper.tool, which exposes theCVE-2026-240688.8The VSL privileged helper does utilize NSXPC for IPC. The implementation of the "shouldAcceptNewConnection" function, which is used by the NCVE-2026-240695.4Kiuwan SAST improperly authorizes SSO logins for locally disabled mapped user accounts, allowing disabled users to continue accessing the apCVE-2026-240708.8During the installation of the Native Access application, a privileged helper `com.native-instruments.NativeAccess.Helper2`, which is used bCVE-2026-240717.8It was found that the XPC service offered by the privileged helper of Native Access uses the PID of the connecting client to verify its codCVE-2026-240728.8An escalation of privilege bug in various modules in Apache HTTP 2.4.66 and earlier allows local .htaccess authors to read files with the prCVE-2026-240737.8Memory corruption when processing decode statistics due to insufficient validation of offset against structure size.
CVE-2026-24061: Critical severity, CVSS 9.8 | Vulnix