CVE-2026-32746

telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because add_slc does not check whether the buffer is full.

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

23.67% chance of exploitation in the next 30 days, 98th percentile

Published

2026-03-13

Updated

2026-03-23

Proof-of-concept exploits (7)

• jeffaf/cve-2026-3274631★ · 2026-03-20
• watchtowrlabs/watchtowr-vs-telnetd-CVE-2026-3274611★ · 2026-03-19
• chosenonehacks/CVE-2026-327460★ · 2026-03-20
• duduLiu8787/CVE-2026-32746-Exploit0★ · 2026-03-20
• kaleth4/CVE-2026-327460★ · 2026-05-09
• MonkeySeC-sys/Kangaroo2★ · 2026-08-02
• scolly2683/donalcorp-vulnops

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/52556

References

• CVE Record
• NVD entry

Related

• CVE-2025-3464
• CVE-2014-6271
• CVE-2019-7711
• CVE-2021-44228
• CVE-2022-30190
• CVE-2024-6387