telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because add_slc does not check whether the buffer is full.
Loading...
Loading...
Score 9.8 from GitHub Security Advisory (severity: CRITICAL) published 2026-03-13. NVD baseline CVSS 9.8; sources differ by 0.0.
telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because add_slc does not check whether the buffer is full.
March 13, 2026
May 5, 2026
Every time one of our enrichment pipelines (NVD, MITRE cvelistV5, EPSS, CISA KEV, GHSA, OSV, vendor advisories) ran against this CVE. Most recent first.
Working exploit code is in the public domain (1 Exploit-DB entry). Defenders should treat patch urgency accordingly — public PoCs typically lead to mass-exploitation within 24-72 hours.
telnetd 2.7 - Buffer Overflow
Open source ↗See which npm, PyPI, Go, and Maven packages are affected by CVE-2026-32746
EchelonGraph automatically scans your cloud infrastructure and maps CVE exposure using blast radius analysis.