https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-01T14:54:36.414228+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-28372 CVE-2026-28372 2026-10-01T14:54:36.418830+00:00

Affected: GNU inetutils

telnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by abusing systemd service credentials support added to the login(1) implementation of util-linux in release 2.40. This is related to client control over the CREDENTIALS_DIRECTORY environment variable, and requires an unprivileged local user to create a login.noauth file.

 https://vulnerability.circl.lu/vuln/usn-8387-1 USN-8387-1 — inetutils vulnerabilities 2026-10-01T14:54:36.418944+00:00

Affected: Ubuntu:Pro:14.04:LTS: inetutils, Ubuntu:Pro:16.04:LTS: inetutils, Ubuntu:Pro:18.04:LTS: inetutils, Ubuntu:Pro:20.04:LTS: inetutils, Ubuntu:Pro:22.04:LTS: inetutils, Ubuntu:24.04:LTS: inetutils, Ubuntu:25.10: inetutils, Ubuntu:26.04:LTS: inetutils

It was discovered that the Inetutils telnet daemon incorrectly handled the CREDENTIALS_DIRECTORY environment variable. An attacker could possibly use this issue to escalate privileges. (CVE-2026-28372)

It was discovered that the Inetutils telnet daemon did not properly validate buffer bounds when processing LINEMODE SLC suboptions. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2026-32746)

It was discovered that the Inetutils telnet client incorrectly handled the NEW_ENVIRON SEND USERVAR option. An attacker could possibly use this issue to read arbitrary environment variables. (CVE-2026-32772)