THREATOPS

THREAT OPS › Threat News › A 32-Year-Old Bug Walks Into A Telnet Server (GNU inetutils Telnetd CVE-2026-32746 Pre-Auth RCE)

A 32-Year-Old Bug Walks Into A Telnet Server (GNU inetutils Telnetd CVE-2026-32746 Pre-Auth RCE)

lowwatchtowrPublished 2026-03-19

<img alt="A 32-Year-Old Bug Walks Into A Telnet Server (GNU inetutils Telnetd CVE-2026-32746 Pre-Auth RCE)" src="https://storage.ghost.io/c/a0/dc/a0dcbbe4-0ae7-4d7e-90f7-ebbc3a0f5a84/content/images/2026/03/Group-8730.png" /><p>A long, long time ago, in a land free of binary exploit mitigations, when Unix still roamed the Earth, there lived a pre-authentication Telnetd vulnerability.</p><p>In fact,

MITRE ATT&CK techniques

JavaScriptT1059.007

Indicators of compromise

b5dd01748b7502f924fce5acbd0cbfd6ae3dfd4fsha1
0c68c1d9688de20a9c362bd84a74965ede947609sha1
b9a6fd09f17da3781b70c0c11838524146e0682dsha1
f833d107c6174e0ddd435dc0287609f9cda0ddc3sha1
eb0cf9617bd22b69ad625575a95cf4fa2c140d55sha1
e03277aa18847b23cbc9887550d6b229cf5db99csha1
388588cfb81ee391b92eda14679949c8a8e3b596sha1
6864598a29b652a6b69a958f5cd1318aa2b258afsha1
CVE-2026-32746cve
CVE-2026-24061cve
CVE-2005-0469cve
https://codeberg.org/inetutils/inetutils/pulls/17/files?ref=labs.watchtowr.comurl
http://www.catb.org/jargon/html/N/nasal-demons.html?ref=labs.watchtowr.comurl
https://ftp.gnu.org/gnu/inetutils/?ref=labs.watchtowr.comurl
https://codeberg.org/inetutils/inetutils/commit/6864598a29b652a6b69a958f5cd1318aa2b258af?ref=labs.watchtowr.comurl
storage.ghost.iodomain

Original source: https://labs.watchtowr.com/a-32-year-old-bug-walks-into-a-telnet-server-gnu-inetutils-telnetd-cve-2026-32746/