CVE coverage
View on NVD →
CVE-2026-24061
CVSS 9.8
Actively exploited (KEV)
3 detections found
telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable.
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | Telnet Authentication Bypass via User Environment Variable | production | 2026-09-18 |
| elastic | Potential Telnet Authentication Bypass (CVE-2026-24061) | production | 2026-09-18 |
| splunk | Linux Telnet Authentication Bypass | production | 2026-05-13 |