Critical 1 exploited CVE DSA-6106-1 1 CVE

inetutils - security update

Published Jan 22, 2026 · Updated Jan 22, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 12	inetutils	2:2.4-2+deb12u2
Debian · 13	inetutils	2:2.6-3+deb13u1

Vulnerabilities 1

Critical 9.8

CVE-2026-24061 Exploited Public exploit EPSS 99%

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment…

GNU Inetutils inetutils inetutils Debian Ubuntu Alpine

Jan 21, 2026
KEV Jan 26, 2026