Overview Recently, NSFOCUS CERT detected that GNU issued a security bulletin to fix the GNU InetUtils Telnetd remote authentication bypass vulnerability (CVE-2026-24061); Since the telnetd process does not effectively verify the USER environment variable value passed in from the client when calling /usr/bin/login, an unauthenticated attacker can construct a specially crafted USER environment variable value […]

The post GNU InetUtils Telnetd Remote Authentication Bypass Vulnerability (CVE-2026-24061) Notice appeared first on NSFOCUS, Inc., a global network and cyber security leader, protects enterprises and carriers from advanced cyber attacks..

The post GNU InetUtils Telnetd Remote Authentication Bypass Vulnerability (CVE-2026-24061) Notice appeared first on Security Boulevard.

NSFOCUS

Source: Security Boulevard
Source Link: https://securityboulevard.com/2026/01/gnu-inetutils-telnetd-remote-authentication-bypass-vulnerability-cve-2026-24061-notice/