GNU InetUtils telnetd 远程认证绕过漏洞（CVE-2026-24061）

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2026-24061
• https://github.com/MY0723/GNU-Inetutils-telnet-CVE-2026-24061-
• https://zhuanlan.zhihu.com/p/1997997353341326849
• https://cloud.tencent.com/developer/article/2633211
• https://zhuanlan.zhihu.com/p/1998528898695181620
• https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/os/GNU-InetUtils-telnetd-%E5%8F%82%E6%95%B0%E6%B3%A8%E5%85%A5%E8%AE%A4%E8%AF%81%E7%BB%95%E8%BF%87%E6%BC%8F%E6%B4%9E-CVE-2026-24061.md
• https://cloud.tencent.com/announce/detail/2204
• https://cve.circl.lu/vuln/CVE-2026-24061
• https://seclists.org/oss-sec/2026/q1/89
• https://access.redhat.com/security/cve/cve-2026-24061
• https://www.offsec.com/blog/cve-2026-24061/
• https://orca.security/resources/blog/cve-2026-24061-gnu-inetutils-telnetd-bypass/
• https://www.sentinelone.com/vulnerability-database/cve-2026-24061/
• https://www.safebreach.com/blog/safebreach-labs-root-cause-analysis-and-poc-exploit-for-cve-2026-24061/
• https://vulhub.org/#/environments/inetutils/CVE-2026-24061

Related Vulnerabilities

• GNU Inetutils Telnetd 未授权 外部资源引用不当漏洞
• GNU InetUtils Telnetd USER环境变量注入 权限绕过漏洞（CVE-2026-24061）