CVE Feed

    Dashboard / CVE / CVE-2026-32746

    CVE-2026-32746

    telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because add_slc does not check whether the buffer is full.

    Published:Mar 13, 2026
    Last Modified:Jun 18, 2026
    EPS:Mar 13, 2026
    EPSS Score:0.23674
    CVSS Score:9.8

    Affected Products

    Vendor
    Gnu
    Product
    Inetutils

    Exploits

    https://lists.gnu.org/archive/html/bug-inetutils/2026-03/msg00031.htmlhttps://www.exploit-db.com/exploits/52556https://github.com/chosenonehacks/CVE-2026-32746https://github.com/danindiana/cve-2026-32746-mitigationhttps://github.com/duduLiu8787/CVE-2026-32746-Exploithttps://github.com/jeffaf/cve-2026-32746https://github.com/kaleth4/CVE-2026-32746https://github.com/MonkeySeC-sys/Kangaroohttps://github.com/watchtowrlabs/watchtowr-vs-telnetd-CVE-2026-32746

    Related CVEs

    CVE-2026-32772 (CVSS 3.4) — telnet in GNU inetutils through 2.7 allows servers to read arbitrary environment variables from clients via NE…
    CVE-2026-28372 (CVSS 7.4) — telnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by abusing systemd serv…
    CVE-2026-24061 (CVSS 9.8) — telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER en…
    CVE-2023-40303 (CVSS 7.8) — GNU inetutils before 2.5 may allow privilege escalation because of unchecked return values of set*id() family …
    CVE-2022-39028 (CVSS 7.5) — telnetd in GNU Inetutils through 2.3, MIT krb5-appl through 1.0.3, and derivative works has a NULL pointer der…
    CVE-2021-40491 (CVSS 6.5) — The ftp client in GNU Inetutils before 2.2 does not validate addresses returned by PASV/LSPV responses to make…
    CVE-2011-4862 (CVSS 10) — Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applicati…
    CVE-2004-1485 (CVSS 7.5) — Buffer overflow in the TFTP client in InetUtils 1.4.2 allows remote malicious DNS servers to execute arbitrary…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High