{"revision":"b4fb37a8de2f44c89c2b578eb0f1f8d4","evidence":{"cve":"CVE-2026-24061","kev":{"cve":"CVE-2026-24061","product":"InetUtils","name":"GNU InetUtils Argument Injection Vulnerability","dateAdded":"2026-01-26","dueDate":"2026-02-16","knownRansomwareUse":false,"shortDescription":"GNU InetUtils contains an argument injection vulnerability in telnetd that could allow for remote authentication bypass via a \"-f root\" value for the USER environment variable.","vendor":"GNU","isMicrosoft":false,"products":[],"advisoryUrl":"https://cgit.git.savannah.gnu.org/cgit/inetutils.git","publicExploit":null,"msrcUrl":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24061","cisaUrl":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-24061"},"epss":null,"observedAt":"2026-10-23T16:01:26.7735792+00:00","kevRetained":false,"reviewIdentity":"3d4794759b8003d9acb7aaa5"}}