CVE-2026-24061 PoC — GNU Inetutils 参数注入漏洞

Source

https://github.com/SystemVll/CVE-2026-24061

Associated Vulnerability

Title: GNU Inetutils 参数注入漏洞 (CVE-2026-24061)
Description:telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable.

Description

Proof of Concept: CVE-2026-24061 is a critical authentication bypass vulnerability in GNU inetutils-telnetd allowing unauthenticated remote attackers to gain instant root shell access via malicious NEW_ENVIRON telnet option exploitation.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →