3.4
Low
CVE-2026-32772 telnet in GNU inetutils through 2.7 allows servers to read arbitrary environment variables from clients via…
Description
telnet in GNU inetutils through 2.7 allows servers to read arbitrary environment variables from clients via NEW_ENVIRON SEND USERVAR.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Inetutils 2.7 | earliest → 2.7 | No fix stated |
Other CVEs of Inetutils
The 4 CVEs of Inetutils →
CVE-2026-32746
telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters)…
9.8
Critical
CVE-2026-28372
telnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by abusing systemd service…
7.4
High
CVE-2026-24061
GNU InetUtils Argument Injection Vulnerability
9.8
Critical