# CVE-2026-24061: inetutils-syslogd: telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environme...

CVE-2026-24061 is fixed in 14 products on 1 platform, first by inetutils-ftp 2:1.9.4-3ubuntu0.1+esm4, released January 20, 2026. It is being exploited: CISA added it to the Known Exploited Vulnerabilities catalog on January 26, 2026. Patch Radar priority: Patch now.

- Web page: https://patchblox.com/security/cve/CVE-2026-24061
- Priority: Patch now
- CVSS: 9.8 (High)
- EPSS: 0.9898
- CISA KEV: listed Jan 26, 2026, federal due date Feb 16, 2026
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Jan 20, 2026

## Description

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | inetutils Debian 11.6 (bullseye) | 2:2.0-1+deb11u3 | [DLA-4453-1](https://patchblox.com/security/data/fix/linux/dla-4453-1.md) | Jan 25, 2026 |
| Linux | inetutils Debian 12.15 (bookworm) | 2:2.4-2+deb12u2 | [DSA-6106-1](https://patchblox.com/security/data/fix/linux/dsa-6106-1.md) | Jan 22, 2026 |
| Linux | inetutils Debian 13.5 (trixie) | 2:2.6-3+deb13u1 | [DSA-6106-1](https://patchblox.com/security/data/fix/linux/dsa-6106-1.md) | Jan 22, 2026 |
| Linux | inetutils Debian 14 | 2:2.7-2 | [DEBIAN-CVE-2026-24061](https://patchblox.com/security/data/fix/linux/debian-cve-2026-24061.md) | Jan 21, 2026 |
| Linux | inetutils-ftp Ubuntu 18.04.6 LTS (bionic) | 2:1.9.4-3ubuntu0.1+esm4 | [inetutils-ftp 2:1.9.4-3ubuntu0.1+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-inetutils-ftp-2-1.9.4-3ubuntu0.1-esm4.md) | Jan 20, 2026 |
| Linux | inetutils-ftp Ubuntu 20.04 LTS (focal) | 2:1.9.4-11ubuntu0.2+esm3 | [inetutils-ftp 2:1.9.4-11ubuntu0.2+esm3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-inetutils-ftp-2-1.9.4-11ubuntu0.2-esm3.md) | Jan 20, 2026 |
| Linux | inetutils-ftp Ubuntu 22.04.1 LTS (jammy) | 2:2.2-2ubuntu0.2 | [inetutils-ftp 2:2.2-2ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-inetutils-ftp-2-2.2-2ubuntu0.2.md) | Jan 20, 2026 |
| Linux | inetutils-ftp Ubuntu 24.04.5 LTS (noble) | 2:2.5-3ubuntu4.1 | [inetutils-ftp 2:2.5-3ubuntu4.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-inetutils-ftp-2-2.5-3ubuntu4.1.md) | Jan 20, 2026 |
| Linux | inetutils-ftp Ubuntu 25.10 (questing) | 2:2.6-1ubuntu3.1 | [inetutils-ftp 2:2.6-1ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-questing-inetutils-ftp-2-2.6-1ubuntu3.1.md) | Jan 20, 2026 |
| Linux | inetutils-ftpd Ubuntu 18.04.6 LTS (bionic) | 2:1.9.4-3ubuntu0.1+esm4 | [inetutils-ftpd 2:1.9.4-3ubuntu0.1+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-inetutils-ftpd-2-1.9.4-3ubuntu0.1-esm4.md) | Jan 20, 2026 |
| Linux | inetutils-ftpd Ubuntu 20.04 LTS (focal) | 2:1.9.4-11ubuntu0.2+esm3 | [inetutils-ftpd 2:1.9.4-11ubuntu0.2+esm3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-inetutils-ftpd-2-1.9.4-11ubuntu0.2-esm3.md) | Jan 20, 2026 |
| Linux | inetutils-ftpd Ubuntu 22.04.1 LTS (jammy) | 2:2.2-2ubuntu0.2 | [inetutils-ftpd 2:2.2-2ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-inetutils-ftpd-2-2.2-2ubuntu0.2.md) | Jan 20, 2026 |
| Linux | inetutils-ftpd Ubuntu 24.04.5 LTS (noble) | 2:2.5-3ubuntu4.1 | [inetutils-ftpd 2:2.5-3ubuntu4.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-inetutils-ftpd-2-2.5-3ubuntu4.1.md) | Jan 20, 2026 |
| Linux | inetutils-ftpd Ubuntu 25.10 (questing) | 2:2.6-1ubuntu3.1 | [inetutils-ftpd 2:2.6-1ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-questing-inetutils-ftpd-2-2.6-1ubuntu3.1.md) | Jan 20, 2026 |
| Linux | inetutils-inetd Ubuntu 18.04.6 LTS (bionic) | 2:1.9.4-3ubuntu0.1+esm4 | [inetutils-inetd 2:1.9.4-3ubuntu0.1+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-inetutils-inetd-2-1.9.4-3ubuntu0.1-esm4.md) | Jan 20, 2026 |
| Linux | inetutils-inetd Ubuntu 20.04 LTS (focal) | 2:1.9.4-11ubuntu0.2+esm3 | [inetutils-inetd 2:1.9.4-11ubuntu0.2+esm3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-inetutils-inetd-2-1.9.4-11ubuntu0.2-esm3.md) | Jan 20, 2026 |
| Linux | inetutils-inetd Ubuntu 22.04.1 LTS (jammy) | 2:2.2-2ubuntu0.2 | [inetutils-inetd 2:2.2-2ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-inetutils-inetd-2-2.2-2ubuntu0.2.md) | Jan 20, 2026 |
| Linux | inetutils-inetd Ubuntu 24.04.5 LTS (noble) | 2:2.5-3ubuntu4.1 | [inetutils-inetd 2:2.5-3ubuntu4.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-inetutils-inetd-2-2.5-3ubuntu4.1.md) | Jan 20, 2026 |
| Linux | inetutils-inetd Ubuntu 25.10 (questing) | 2:2.6-1ubuntu3.1 | [inetutils-inetd 2:2.6-1ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-questing-inetutils-inetd-2-2.6-1ubuntu3.1.md) | Jan 20, 2026 |
| Linux | inetutils-ping Ubuntu 18.04.6 LTS (bionic) | 2:1.9.4-3ubuntu0.1+esm4 | [inetutils-ping 2:1.9.4-3ubuntu0.1+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-inetutils-ping-2-1.9.4-3ubuntu0.1-esm4.md) | Jan 20, 2026 |
| Linux | inetutils-ping Ubuntu 20.04 LTS (focal) | 2:1.9.4-11ubuntu0.2+esm3 | [inetutils-ping 2:1.9.4-11ubuntu0.2+esm3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-inetutils-ping-2-1.9.4-11ubuntu0.2-esm3.md) | Jan 20, 2026 |
| Linux | inetutils-ping Ubuntu 22.04.1 LTS (jammy) | 2:2.2-2ubuntu0.2 | [inetutils-ping 2:2.2-2ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-inetutils-ping-2-2.2-2ubuntu0.2.md) | Jan 20, 2026 |
| Linux | inetutils-ping Ubuntu 24.04.5 LTS (noble) | 2:2.5-3ubuntu4.1 | [inetutils-ping 2:2.5-3ubuntu4.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-inetutils-ping-2-2.5-3ubuntu4.1.md) | Jan 20, 2026 |
| Linux | inetutils-ping Ubuntu 25.10 (questing) | 2:2.6-1ubuntu3.1 | [inetutils-ping 2:2.6-1ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-questing-inetutils-ping-2-2.6-1ubuntu3.1.md) | Jan 20, 2026 |
| Linux | inetutils-syslogd Ubuntu 18.04.6 LTS (bionic) | 2:1.9.4-3ubuntu0.1+esm4 | [inetutils-syslogd 2:1.9.4-3ubuntu0.1+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-inetutils-syslogd-2-1.9.4-3ubuntu0.1-esm4.md) | Jan 20, 2026 |
| Linux | inetutils-syslogd Ubuntu 20.04 LTS (focal) | 2:1.9.4-11ubuntu0.2+esm3 | [inetutils-syslogd 2:1.9.4-11ubuntu0.2+esm3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-inetutils-syslogd-2-1.9.4-11ubuntu0.2-esm3.md) | Jan 20, 2026 |
| Linux | inetutils-syslogd Ubuntu 22.04.1 LTS (jammy) | 2:2.2-2ubuntu0.2 | [inetutils-syslogd 2:2.2-2ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-inetutils-syslogd-2-2.2-2ubuntu0.2.md) | Jan 20, 2026 |
| Linux | inetutils-syslogd Ubuntu 24.04.5 LTS (noble) | 2:2.5-3ubuntu4.1 | [inetutils-syslogd 2:2.5-3ubuntu4.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-inetutils-syslogd-2-2.5-3ubuntu4.1.md) | Jan 20, 2026 |
| Linux | inetutils-syslogd Ubuntu 25.10 (questing) | 2:2.6-1ubuntu3.1 | [inetutils-syslogd 2:2.6-1ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-questing-inetutils-syslogd-2-2.6-1ubuntu3.1.md) | Jan 20, 2026 |
| Linux | inetutils-talk Ubuntu 18.04.6 LTS (bionic) | 2:1.9.4-3ubuntu0.1+esm4 | [inetutils-talk 2:1.9.4-3ubuntu0.1+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-inetutils-talk-2-1.9.4-3ubuntu0.1-esm4.md) | Jan 20, 2026 |
| Linux | inetutils-talk Ubuntu 20.04 LTS (focal) | 2:1.9.4-11ubuntu0.2+esm3 | [inetutils-talk 2:1.9.4-11ubuntu0.2+esm3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-inetutils-talk-2-1.9.4-11ubuntu0.2-esm3.md) | Jan 20, 2026 |
| Linux | inetutils-talk Ubuntu 22.04.1 LTS (jammy) | 2:2.2-2ubuntu0.2 | [inetutils-talk 2:2.2-2ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-inetutils-talk-2-2.2-2ubuntu0.2.md) | Jan 20, 2026 |
| Linux | inetutils-talk Ubuntu 24.04.5 LTS (noble) | 2:2.5-3ubuntu4.1 | [inetutils-talk 2:2.5-3ubuntu4.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-inetutils-talk-2-2.5-3ubuntu4.1.md) | Jan 20, 2026 |
| Linux | inetutils-talk Ubuntu 25.10 (questing) | 2:2.6-1ubuntu3.1 | [inetutils-talk 2:2.6-1ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-questing-inetutils-talk-2-2.6-1ubuntu3.1.md) | Jan 20, 2026 |
| Linux | inetutils-talkd Ubuntu 18.04.6 LTS (bionic) | 2:1.9.4-3ubuntu0.1+esm4 | [inetutils-talkd 2:1.9.4-3ubuntu0.1+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-inetutils-talkd-2-1.9.4-3ubuntu0.1-esm4.md) | Jan 20, 2026 |
| Linux | inetutils-talkd Ubuntu 20.04 LTS (focal) | 2:1.9.4-11ubuntu0.2+esm3 | [inetutils-talkd 2:1.9.4-11ubuntu0.2+esm3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-inetutils-talkd-2-1.9.4-11ubuntu0.2-esm3.md) | Jan 20, 2026 |
| Linux | inetutils-talkd Ubuntu 22.04.1 LTS (jammy) | 2:2.2-2ubuntu0.2 | [inetutils-talkd 2:2.2-2ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-inetutils-talkd-2-2.2-2ubuntu0.2.md) | Jan 20, 2026 |
| Linux | inetutils-talkd Ubuntu 24.04.5 LTS (noble) | 2:2.5-3ubuntu4.1 | [inetutils-talkd 2:2.5-3ubuntu4.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-inetutils-talkd-2-2.5-3ubuntu4.1.md) | Jan 20, 2026 |
| Linux | inetutils-talkd Ubuntu 25.10 (questing) | 2:2.6-1ubuntu3.1 | [inetutils-talkd 2:2.6-1ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-questing-inetutils-talkd-2-2.6-1ubuntu3.1.md) | Jan 20, 2026 |
| Linux | inetutils-telnet Ubuntu 18.04.6 LTS (bionic) | 2:1.9.4-3ubuntu0.1+esm4 | [inetutils-telnet 2:1.9.4-3ubuntu0.1+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-inetutils-telnet-2-1.9.4-3ubuntu0.1-esm4.md) | Jan 20, 2026 |
| Linux | inetutils-telnet Ubuntu 20.04 LTS (focal) | 2:1.9.4-11ubuntu0.2+esm3 | [inetutils-telnet 2:1.9.4-11ubuntu0.2+esm3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-inetutils-telnet-2-1.9.4-11ubuntu0.2-esm3.md) | Jan 20, 2026 |
| Linux | inetutils-telnet Ubuntu 22.04.1 LTS (jammy) | 2:2.2-2ubuntu0.2 | [inetutils-telnet 2:2.2-2ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-inetutils-telnet-2-2.2-2ubuntu0.2.md) | Jan 20, 2026 |
| Linux | inetutils-telnet Ubuntu 24.04.5 LTS (noble) | 2:2.5-3ubuntu4.1 | [inetutils-telnet 2:2.5-3ubuntu4.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-inetutils-telnet-2-2.5-3ubuntu4.1.md) | Jan 20, 2026 |
| Linux | inetutils-telnet Ubuntu 25.10 (questing) | 2:2.6-1ubuntu3.1 | [inetutils-telnet 2:2.6-1ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-questing-inetutils-telnet-2-2.6-1ubuntu3.1.md) | Jan 20, 2026 |
| Linux | inetutils-telnetd Ubuntu 18.04.6 LTS (bionic) | 2:1.9.4-3ubuntu0.1+esm4 | [inetutils-telnetd 2:1.9.4-3ubuntu0.1+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-inetutils-telnetd-2-1.9.4-3ubuntu0.1-esm4.md) | Jan 20, 2026 |
| Linux | inetutils-telnetd Ubuntu 20.04 LTS (focal) | 2:1.9.4-11ubuntu0.2+esm3 | [inetutils-telnetd 2:1.9.4-11ubuntu0.2+esm3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-inetutils-telnetd-2-1.9.4-11ubuntu0.2-esm3.md) | Jan 20, 2026 |
| Linux | inetutils-telnetd Ubuntu 22.04.1 LTS (jammy) | 2:2.2-2ubuntu0.2 | [inetutils-telnetd 2:2.2-2ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-inetutils-telnetd-2-2.2-2ubuntu0.2.md) | Jan 20, 2026 |
| Linux | inetutils-telnetd Ubuntu 24.04.5 LTS (noble) | 2:2.5-3ubuntu4.1 | [inetutils-telnetd 2:2.5-3ubuntu4.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-inetutils-telnetd-2-2.5-3ubuntu4.1.md) | Jan 20, 2026 |
| Linux | inetutils-telnetd Ubuntu 25.10 (questing) | 2:2.6-1ubuntu3.1 | [inetutils-telnetd 2:2.6-1ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-questing-inetutils-telnetd-2-2.6-1ubuntu3.1.md) | Jan 20, 2026 |
| Linux | inetutils-tools Ubuntu 18.04.6 LTS (bionic) | 2:1.9.4-3ubuntu0.1+esm4 | [inetutils-tools 2:1.9.4-3ubuntu0.1+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-inetutils-tools-2-1.9.4-3ubuntu0.1-esm4.md) | Jan 20, 2026 |
| Linux | inetutils-tools Ubuntu 20.04 LTS (focal) | 2:1.9.4-11ubuntu0.2+esm3 | [inetutils-tools 2:1.9.4-11ubuntu0.2+esm3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-inetutils-tools-2-1.9.4-11ubuntu0.2-esm3.md) | Jan 20, 2026 |
| Linux | inetutils-tools Ubuntu 22.04.1 LTS (jammy) | 2:2.2-2ubuntu0.2 | [inetutils-tools 2:2.2-2ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-inetutils-tools-2-2.2-2ubuntu0.2.md) | Jan 20, 2026 |
| Linux | inetutils-tools Ubuntu 24.04.5 LTS (noble) | 2:2.5-3ubuntu4.1 | [inetutils-tools 2:2.5-3ubuntu4.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-inetutils-tools-2-2.5-3ubuntu4.1.md) | Jan 20, 2026 |
| Linux | inetutils-tools Ubuntu 25.10 (questing) | 2:2.6-1ubuntu3.1 | [inetutils-tools 2:2.6-1ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-questing-inetutils-tools-2-2.6-1ubuntu3.1.md) | Jan 20, 2026 |
| Linux | inetutils-traceroute Ubuntu 18.04.6 LTS (bionic) | 2:1.9.4-3ubuntu0.1+esm4 | [inetutils-traceroute 2:1.9.4-3ubuntu0.1+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-inetutils-traceroute-2-1.9.4-3ubuntu0.1-esm4.md) | Jan 20, 2026 |
| Linux | inetutils-traceroute Ubuntu 20.04 LTS (focal) | 2:1.9.4-11ubuntu0.2+esm3 | [inetutils-traceroute 2:1.9.4-11ubuntu0.2+esm3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-inetutils-traceroute-2-1.9.4-11ubuntu0.2-esm3.md) | Jan 20, 2026 |
| Linux | inetutils-traceroute Ubuntu 22.04.1 LTS (jammy) | 2:2.2-2ubuntu0.2 | [inetutils-traceroute 2:2.2-2ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-inetutils-traceroute-2-2.2-2ubuntu0.2.md) | Jan 20, 2026 |
| Linux | inetutils-traceroute Ubuntu 24.04.5 LTS (noble) | 2:2.5-3ubuntu4.1 | [inetutils-traceroute 2:2.5-3ubuntu4.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-inetutils-traceroute-2-2.5-3ubuntu4.1.md) | Jan 20, 2026 |
| Linux | inetutils-traceroute Ubuntu 25.10 (questing) | 2:2.6-1ubuntu3.1 | [inetutils-traceroute 2:2.6-1ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-questing-inetutils-traceroute-2-2.6-1ubuntu3.1.md) | Jan 20, 2026 |
| Linux | telnet Ubuntu 24.04.5 LTS (noble) | 0.17+2.5-3ubuntu4.1 | [telnet 0.17+2.5-3ubuntu4.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-telnet-0.17-2.5-3ubuntu4.1.md) | Jan 20, 2026 |
| Linux | telnet Ubuntu 25.10 (questing) | 0.17+2.6-1ubuntu3.1 | [telnet 0.17+2.6-1ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-questing-telnet-0.17-2.6-1ubuntu3.1.md) | Jan 20, 2026 |
| Linux | telnetd Ubuntu 24.04.5 LTS (noble) | 0.17+2.5-3ubuntu4.1 | [telnetd 0.17+2.5-3ubuntu4.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-telnetd-0.17-2.5-3ubuntu4.1.md) | Jan 20, 2026 |
| Linux | telnetd Ubuntu 25.10 (questing) | 0.17+2.6-1ubuntu3.1 | [telnetd 0.17+2.6-1ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-questing-telnetd-0.17-2.6-1ubuntu3.1.md) | Jan 20, 2026 |

---

Data as of 2026-11-09T13:31:49Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.