CVE-2026-32746: GNU InetUtils

Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days.

telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because add_slc does not check whether the buffer is full.

Affected products

• GNU InetUtils: up to and including 2.7

Published 2026-03-13. Last modified 2026-06-17.