Actively exploited vulnerabilities affecting GNU products.https://wildfortech.comhttps://wildfortech.com/security#CVE-2026-24061https://wildfortech.com/security#CVE-2026-24061GNU InetUtils' telnetd daemon contains an argument injection flaw that lets a remote attacker bypass authentication entirely by supplying a specially crafted USER environment variable value of '-f root'. Because telnet is often used in legacy or embedded environments, a successful exploit grants an unauthenticated attacker access — potentially as root — without valid credentials. This is a critical risk for any system running the affected telnetd service, as it requires no prior foothold.Mon, 26 Jan 2026 00:00:00 GMTGNUInetUtilshttps://wildfortech.com/security#CVE-2014-6278https://wildfortech.com/security#CVE-2014-6278This is a Shellshock-era vulnerability in GNU Bash that allows remote attackers to inject and execute arbitrary operating system commands by crafting a malicious environment. Because Bash is widely used as a system shell across Linux and Unix-based systems, exploitation can give an attacker full control over affected hosts without requiring authentication. Any internet-facing service that invokes Bash — such as CGI scripts or DHCP clients — is a potential entry point.Thu, 02 Oct 2025 00:00:00 GMTGNUGNU Bash