CVE-2026-24061: fallo crítico en GNU Inetutils
Publicada el · Actualizada el
100Vexday Risk Score
Corrige ahora. Ella está bajo explotación confirmada por CISA y tiene exploit funcional público.
ssvc Actcvss 9.8epss 99%
de la publicación al arma0 días
Publicada en NVD21 ene
1ª PoC3 jul
metasploit+5d
CISA KEV+5d
probabilidad de explotación
99%top 1% de las CVE
explotación observada
síCISA + VulnCheck
128 exploit(s) público(s)
Acción exigida por CISAplazo federal: 2026-02-16
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
En resumen
Un fallo en telnetd (servicio de acceso remoto) permite que atacantes eludan la autenticación y obtengan acceso directo como usuario root manipulando la variable de entorno USER. Esto es crítico porque otorga control total del sistema a usuarios no autorizados.
Detalle técnico
telnetd en GNU Inetutils versión 2.7 y anteriores falla en validar adecuadamente la variable de entorno USER, permitiendo que atacantes remotos omitan autenticación estableciendo USER como "-f root". Esto habilita ejecución remota de código no autenticada con privilegios root. La vulnerabilidad afecta sistemas con telnetd habilitado y expuesto a redes no confiables.
Resumen generado y traducido por IA a partir de la descripción oficial.
El análisis completo de esta CVE está disponible en portugués →
telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Productos afectados
GNU · InetutilsPoCs públicas encontradas — 128
exploitdbwww.exploit-db.com/exploits/52524no verificadogithubgithub.com/jacubes/CVE-2026-24061★ 825githubgithub.com/SafeBreach-Labs/CVE-2026-24061★ 208githubgithub.com/JayGLXR/CVE-2026-24061-POC★ 68githubgithub.com/ZeroDayEvil/CVE-2026-24061★ 22githubgithub.com/parameciumzhang/Tell-Me-Root★ 21githubgithub.com/Lingzesec/CVE-2026-24061-GUI★ 17githubgithub.com/ekomsSavior/telnet_scan★ 12githubgithub.com/leonjza/inetutils-telnetd-auth-bypass★ 12githubgithub.com/Chocapikk/CVE-2026-24061★ 12githubgithub.com/TryA9ain/CVE-2026-24061★ 10githubgithub.com/0p5cur/CVE-2026-24061-POC★ 8githubgithub.com/h3athen/CVE-2026-24061★ 8githubgithub.com/tc4dy/CVE-2026-24061-PoC-Exploit★ 7githubgithub.com/sh4den/CVE-2026-24061★ 6githubgithub.com/franckferman/CVE-2026-24061★ 5githubgithub.com/shivam-bathla/CVE-2026-24061-setup★ 4githubgithub.com/balgan/CVE-2026-24061★ 4githubgithub.com/madfxr/Twenty-Three-Scanner★ 4githubgithub.com/xuemian168/CVE-2026-24061★ 3githubgithub.com/K3ysTr0K3R/CVE-2026-24061★ 3githubgithub.com/X-croot/CVE-2026-24061_POC★ 2githubgithub.com/duy-31/CVE-2026-24061---telnetd★ 2githubgithub.com/0xBlackash/CVE-2026-24061★ 1githubgithub.com/infat0x/CVE-2026-24061★ 1githubgithub.com/MY0723/GNU-Inetutils-telnet-CVE-2026-24061-★ 1githubgithub.com/FurkanKAYAPINAR/CVE-2026-24061-telnet2root★ 1githubgithub.com/cumakurt/tscan★ 1githubgithub.com/setuju/telnetd★ 1githubgithub.com/JakeSwiz/telnet-inetutils-auth-bypass-CVE-2026-24061★ 1githubgithub.com/dotelpenguin/telnetd_CVE-2026-24061_tester★ 1githubgithub.com/monstertsl/CVE-2026-24061★ 1githubgithub.com/Mr-Zapi/CVE-2026-24061★ 1githubgithub.com/Cosm3No1de/htb-orion-writeup★ 0githubgithub.com/r00tuser111/CVE-2026-24061★ 0githubgithub.com/androidteacher/CVE-2026-24061-PoC-Telnetd★ 0githubgithub.com/tiborscholtz/CVE-2026-24061★ 0githubgithub.com/killsystema/scan-cve-2026-24061★ 0githubgithub.com/harygovind/CVE-2026-24061★ 0githubgithub.com/SeptembersEND/CVE--2026-24061★ 0githubgithub.com/skyejacobson/CyberhawksLab-telnetCVE★ 0githubgithub.com/z3n70/CVE-2026-24061★ 0githubgithub.com/ms0x08-dev/CVE-2026-24061-POC★ 0githubgithub.com/punitdarji/telnetd-cve-2026-24061★ 0githubgithub.com/XsanFlip/CVE-2026-24061-Scanner★ 0githubgithub.com/LucasPDiniz/CVE-2026-24061★ 0githubgithub.com/0x7556/CVE-2026-24061★ 0githubgithub.com/obrunolima1910/CVE-2026-24061★ 0githubgithub.com/iLokaas/CVE-2026-24061-payload★ 0githubgithub.com/athack-ctf/chall2026-telneted★ 0githubgithub.com/canpilayda/inetutils-telnetd-cve-2026-24061★ 0githubgithub.com/lavabyte/telnet-CVE-2026-24061★ 0githubgithub.com/Parad0x7e/CVE-2026-24061★ 0githubgithub.com/BrainBob/Telnet-TestVuln-CVE-2026-24061★ 0githubgithub.com/BrainBob/CVE-2026-24061★ 0githubgithub.com/Alter-N0X/CVE-2026-24061-POC★ 0githubgithub.com/typeconfused/CVE-2026-24061★ 0githubgithub.com/Mefhika120/Ashwesker-CVE-2026-24061★ 0githubgithub.com/midox008/CVE-2026-24061★ 0githubgithub.com/novitahk/Exploit-CVE-2026-24061★ 0githubgithub.com/Gabs-hub/CVE-2026-24061_Lab★ 0githubgithub.com/buzz075/CVE-2026-24061★ 0githubgithub.com/nrnw/CVE-2026-24061-GNU-inetutils-Telnet-Detector★ 0githubgithub.com/scumfrog/cve-2026-24061★ 0githubgithub.com/mbanyamer/CVE-2026-24061-GNU-Inetutils-telnetd-Remote-Authentication-Bypass-Root-Shell-★ 0githubgithub.com/kyukazamiqq/CVE-2026-24061★ 0githubgithub.com/przemytn/CVE-2026-24061★ 0githubgithub.com/ahmadsadeeq/TelnetdBypass-★ 0githubgithub.com/anxs3c/CVE-2026-24061-GNU-InetUtils-telnetd★ 0githubgithub.com/akpmarcelin/CVE-2026-24061-lab★ 0githubgithub.com/stoerti2/Abyssal★ 0githubgithub.com/s-vx/CVE-2026-24061★ 0githubgithub.com/Ish3ng0m4/CVE-2026-24061-Telnetd★ 0githubgithub.com/HD0x01/CVE-2026-24061-NSE★ 0vulncheckvulncheck.com/xdb/027ac3b5fcd3no verificadovulncheckvulncheck.com/xdb/01bf6bfce293no verificadovulncheckvulncheck.com/xdb/e14b60108668no verificadovulncheckvulncheck.com/xdb/037f09ac8bd2no verificadovulncheckvulncheck.com/xdb/281c93516f03no verificadovulncheckvulncheck.com/xdb/4fe4957aaafeno verificadovulncheckvulncheck.com/xdb/e8b0b325123fno verificadovulncheckvulncheck.com/xdb/cdc425361e5ano verificadovulncheckvulncheck.com/xdb/ce38d836a6d4no verificadovulncheckvulncheck.com/xdb/6c64eec2246fno verificadovulncheckvulncheck.com/xdb/2095407cd24eno verificadovulncheckvulncheck.com/xdb/1965f3150b25no verificadovulncheckvulncheck.com/xdb/9d90ab411f9cno verificadovulncheckvulncheck.com/xdb/089b79c9b65cno verificadovulncheckvulncheck.com/xdb/14ec796d456eno verificadovulncheckvulncheck.com/xdb/45d6d2515c7eno verificadovulncheckvulncheck.com/xdb/ac3246834fa8no verificadovulncheckvulncheck.com/xdb/05724362c1bdno verificadovulncheckvulncheck.com/xdb/07cf2b439a9dno verificadovulncheckvulncheck.com/xdb/a4bd074b1edcno verificadovulncheckvulncheck.com/xdb/df7878b9e432no verificadovulncheckvulncheck.com/xdb/cbd3b8d0a002no verificadovulncheckvulncheck.com/xdb/8036e0e4aba4no verificadovulncheckvulncheck.com/xdb/e8d1ce668bd6no verificadovulncheckvulncheck.com/xdb/36c2b1e5c7dcno verificadovulncheckvulncheck.com/xdb/107b81fce065no verificadovulncheckvulncheck.com/xdb/e03fbca3008cno verificadovulncheckvulncheck.com/xdb/fe99751b4742no verificadovulncheckvulncheck.com/xdb/4fa764154266no verificadovulncheckvulncheck.com/xdb/960fcc9bd89cno verificadovulncheckvulncheck.com/xdb/e97f97610013no verificadovulncheckvulncheck.com/xdb/febad18902a8no verificadovulncheckvulncheck.com/xdb/5026f54ecaaeno verificadovulncheckvulncheck.com/xdb/f1b5a45051d3no verificadovulncheckvulncheck.com/xdb/a4152661a60cno verificadovulncheckvulncheck.com/xdb/156d503457bcno verificadovulncheckvulncheck.com/xdb/9f3ce3e6ca21no verificadovulncheckvulncheck.com/xdb/0736e00f5aceno verificadovulncheckvulncheck.com/xdb/f05b1fb3f5a1no verificadovulncheckvulncheck.com/xdb/0bab298804b5no verificadovulncheckvulncheck.com/xdb/e90c23bb7208no verificadovulncheckvulncheck.com/xdb/a7890dd1271eno verificadovulncheckvulncheck.com/xdb/193b14870c6cno verificadovulncheckvulncheck.com/xdb/4a52280d4be4no verificadovulncheckvulncheck.com/xdb/eb6ce1666294no verificadovulncheckvulncheck.com/xdb/0ecc49d5a1f0no verificadovulncheckvulncheck.com/xdb/57ee6813a50eno verificadovulncheckvulncheck.com/xdb/bd5639365990no verificadocve_referencewww.openwall.com/lists/oss-security/2026/01/20/2#:~:text=root@...a%3A~%20USER='no verificadovulncheckvulncheck.com/xdb/53db998fa024no verificadovulncheckvulncheck.com/xdb/59d8a7fe1a59no verificadovulncheckvulncheck.com/xdb/04059d8aed83no verificadovulncheckvulncheck.com/xdb/137fff97fa8dno verificadovulncheckvulncheck.com/xdb/ec801fb614c1no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
https://codeberg.org/inetutils/inetutils/commit/ccba9f748aa8d50a38d7748e2e60362edd6a32cchttps://codeberg.org/inetutils/inetutils/commit/fd702c02497b2f398e739e3119bed0b23dd7aa7bhttps://lists.debian.org/debian-lts-announce/2026/01/msg00025.htmlhttps://lists.gnu.org/archive/html/bug-inetutils/2026-01/msg00004.htmlhttps://redteam.ae/blog/cve-2026-24061-inetutils-telnetd-root-bypasshttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-24061https://www.gnu.org/software/inetutils/https://www.labs.greynoise.io/grimoire/2026-01-22-f-around-and-find-out-18-hours-of-unsolicited-houseguests/index.htmlhttps://www.openwall.com/lists/oss-security/2026/01/20/2https://www.openwall.com/lists/oss-security/2026/01/20/2#:~:text=root@...a%3A~%20USER='https://www.openwall.com/lists/oss-security/2026/01/20/8https://www.vicarius.io/vsociety/posts/cve-2026-24061-detection-script-remote-authentication-bypass-in-gnu-inetutils-package