Findings

CVE-2026-32746

telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because add_slc does not check whether…

Published Mar 13, 2026 · updated Jun 17, 2026 · gnu inetutils

telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because add_slc does not check whether the buffer is full.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 13, 2026 · NIST NVD

    Detected

    telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because add_slc does not check whether the buffer is full.

  2. Jun 17, 2026 · NIST NVD

    Updated

    telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because add_slc does not check whether the buffer is full.

Affected

  • cpe gnu/inetutilsversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-32746

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-32746

    telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because add_slc does not check whether the buffer is full.

    nvd.nist.gov

References

CVE-2026-32746 · ZeroDay Findings