CVE-2026-28372
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 7.4epss 0.4%
probabilidad de explotación
0.4%top 70% de las CVE
explotación observada
noninguna fuente lo reporta
telnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by abusing systemd service credentials support added to the login(1) implementation of util-linux in release 2.40. This is related to client control over the CREDENTIALS_DIRECTORY environment variable, and requires an unprivileged local user to create a login.noauth file.
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Productos afectados
GNU · inetutilsReferencias
https://git.hadrons.org/cgit/debian/pkgs/inetutils.git/commit/?id=3953943d8296310485f98963883a798545ab9a6chttps://lists.gnu.org/archive/html/bug-inetutils/2026-02/msg00000.htmlhttps://lists.gnu.org/archive/html/bug-inetutils/2026-02/msg00012.htmlhttps://www.openwall.com/lists/oss-security/2026/02/24/1http://www.openwall.com/lists/oss-security/2026/02/27/3http://www.openwall.com/lists/oss-security/2026/03/06/2http://www.openwall.com/lists/oss-security/2026/03/06/3http://www.openwall.com/lists/oss-security/2026/03/07/1http://www.openwall.com/lists/oss-security/2026/03/07/2