9.8 CriticalCWE-120
CVE-2026-32746
GNU inetutils vulnerability
GNUinetutils
Status
- Not in CISA KEV
Exploit probabilityEPSSchecked 24 Oct
2.5%probability of exploitation in the next 30 days
Higher than 85% of scored CVEs
SeverityCVSS
9.8Critical
Description NVD
telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because add_slc does not check whether the buffer is full.
Coverage 2 articles · 2 outlets
See the full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Wed 18 Mar · 05:58 UTC | The Hacker News | Critical Unpatched Telnetd Flaw (CVE-2026-32746) Enables Unauthenticated Root RCE via Port 23 |
| Wed 18 Mar · 16:11 UTC | Security Affairs | Researchers warn of unpatched, critical Telnetd flaw affecting all versions |
- Researchers warn of unpatched, critical Telnetd flaw affecting all versionsSecurity Affairs
- Critical Unpatched Telnetd Flaw (CVE-2026-32746) Enables Unauthenticated Root RCE via Port 23The Hacker News · first in our coverage