PT-2026-25391 · Gnu · Telnet

Justin Swartz · Publicado 2026-01-01 · Atualizado 2026-06-04 · CVE-2026-32772

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions telnet versions through 2.7

Description telnet in GNU inetutils allows servers to read arbitrary environment variables from clients via the NEW ENVIRON SEND USERVAR functionality. The issue involves the ability of servers to access client environment variables, potentially exposing sensitive information.

Recommendations versions prior to 2.8

Exploit

Correção

Enumeração de Fraquezas

CWE-669

Identificadores relacionados

BDU:2026-04683

CVE-2026-32772

USN-8387-1

Produtos afetados

Telnet

Referências · 17

• 🔥 https://openwall.com/lists/oss-security/2026/03/13/1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-32772 · Nota de Segurança
• https://cve.org/CVERecord?id=CVE-2026-32772 · Nota de Segurança
• https://t.me/CVEtracker/47378 · Publicação no Telegram
• https://ubuntu.com/security/CVE-2026-28372 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-32772 · Aviso do Fabricante
• https://t.me/cveNotify/162216 · Publicação no Telegram
• https://twitter.com/CVEnew/status/2032605834262249699 · Publicação no Twitter
• https://ftp.gnu.org/gnu/inetutils · Nota
• https://osv.dev/vulnerability/USN-8387-1 · Aviso do Fabricante
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2026-0512SE18MD · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2026-04683 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-32772 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2026-32772 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2026-32746 · Aviso do Fabricante