Proof of Concept: CVE-2026-24061 is a critical authentication bypass vulnerability in GNU inetutils-telnetd allowing unauthenticated remote attackers to gain instant root shell access via malicious NEW_ENVIRON telnet option exploitation.
CVE-2026-24061 - GNU InetUtils Telnetd Remote Authentication Bypass
GNU InetUtils telnetd - Unauthenticated Remote Root via NEW-ENVIRON Variable Injection.
ban-telnet: TELNET client and server (for UNIX)
A PoC exploit for CVE-2026-24061 - GNU InetUtils telnetd Argument Injection Authentication Bypass
A from-scratch Telnet server in Python (asyncio, stdlib-only) — RFC 854 codec, virtual users with scrypt auth, a sandboxed console and a path-traversal jail.
Add a description, image, and links to the telnetd topic page so that developers can more easily learn about it.
To associate your repository with the telnetd topic, visit your repo's landing page and select "manage topics."