CVE-2026-32746
53Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 9.8epss 24%
from disclosure to weapon55 days
Published on NVDMar 13
1st PoC+55d
exploitation probability
24%top 2% of all CVEs
observed exploitation
nono source reports it
4 public exploit(s)
In short
The telnetd service in GNU inetutils has a critical flaw where it can write data outside its designated memory buffer when handling certain telnet commands. This allows attackers to crash the server or potentially execute malicious code by sending specially crafted telnet requests.
Technical detail
CVE-2026-32746 is a stack-based buffer overflow in the LINEMODE SLC suboption handler of telnetd (GNU inetutils ≤2.7). The add_slc function fails to validate buffer boundaries before writing, enabling remote attackers to trigger out-of-bounds memory writes via crafted telnet protocol messages, resulting in denial of service or code execution without authentication.
Summary generated and translated by AI from the official description.
telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because add_slc does not check whether the buffer is full.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
GNU · inetutilspublic PoCs found — 4
exploitdbwww.exploit-db.com/exploits/52556unverifiedgithubgithub.com/MonkeySeC-sys/Kangaroo★ 2githubgithub.com/kaleth4/CVE-2026-32746★ 0cve_referencegithub.com/watchtowrlabs/watchtowr-vs-telnetd-CVE-2026-32746unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.