Your RSA-2048 keys break in 2030. Find every one of them before attackers do.
CISA KEV·Added 2026-01-26 — agencies required to remediate by 2026-02-16

CVE-2026-24061

CRITICAL
Published
Jan 21, 2026
Updated
Mar 15, 2026
Affected
0 pkgs
Patched
None yet
Exploits
3 known

EPSS Exploitation Probability

via FIRST.org ↗
91.5%probability of exploitation in next 30 days
Very High Risk100th percentile+0.41%
10.9%40.6%70.3%100.0%29.6%91.5%Feb 26May 26Jun 26

EPSS (Exploit Prediction Scoring System) is a daily probability model maintained by FIRST.org. It estimates the likelihood a CVE will be exploited in production environments within the next 30 days, derived from real-world threat intelligence signals.

Description

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable.

Exploits & PoCs
3

Research use only. For defensive security, authorized penetration testing, and academic research only. Never execute exploit code against systems without explicit written authorization.

EDB-52524locallinux

GNU InetUtils 2.6 - Telnetd Remote Privilege Escalation

by aliguliyev · Apr 29, 2026

Exploit-DB Source

Frequently Asked Questions

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable.
O3 Security · Impact-Aware SCA

Is CVE-2026-24061 in your stack?

O3 detects CVE-2026-24061 across dependencies and uses function-level reachability to confirm whether the vulnerable code path is actually reachable — not just present. No false positives.

Scan my stack How O3 SCA works