CVE Feed

    Dashboard / CVE / CVE-2026-32772

    CVE-2026-32772

    telnet in GNU inetutils through 2.7 allows servers to read arbitrary environment variables from clients via NEW_ENVIRON SEND USERVAR.

    Published:Mar 13, 2026
    Last Modified:May 5, 2026
    EPS:Mar 13, 2026
    EPSS Score:0.00048
    CVSS Score:3.4

    Affected Products

    Vendor
    Gnu
    Product
    Inetutils

    Exploits

    https://www.openwall.com/lists/oss-security/2026/03/13/1https://www.openwall.com/lists/oss-security/2026/03/13/1

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-32746 (CVSS 9.8) — telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) …
    CVE-2026-28372 (CVSS 7.4) — telnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by abusing systemd serv…
    CVE-2026-24061 (CVSS 9.8) — telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER en…
    CVE-2023-40303 (CVSS 7.8) — GNU inetutils before 2.5 may allow privilege escalation because of unchecked return values of set*id() family …
    CVE-2022-39028 (CVSS 7.5) — telnetd in GNU Inetutils through 2.3, MIT krb5-appl through 1.0.3, and derivative works has a NULL pointer der…
    CVE-2021-40491 (CVSS 6.5) — The ftp client in GNU Inetutils before 2.2 does not validate addresses returned by PASV/LSPV responses to make…
    CVE-2011-4862 (CVSS 10) — Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applicati…
    CVE-2004-1485 (CVSS 7.5) — Buffer overflow in the TFTP client in InetUtils 1.4.2 allows remote malicious DNS servers to execute arbitrary…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High