MSRXMSRXSecurity
Vendors / GNU

GNU vulnerabilities being exploited

1 GNU flaw was confirmed exploited in the wild in the past 365 days, across 1 product: InetUtils. If you run any of them, patch these first.

AddedExploited vulnerabilityFix by
2026-01-26CVE-2026-24061 InetUtils
GNU InetUtils Argument Injection Vulnerability

GNU InetUtils contains an argument injection vulnerability in telnetd that could allow for remote authentication bypass via a "-f root" value for the USER environment variable.

2026-02-16
Watch my GNU softwareScan a websiteAll vendors

Source: CISA Known Exploited Vulnerabilities catalog 2026.10.29 (live). A listing means some versions are affected: check yours in the advisory. Guidance only.