A vulnerability labeled as critical has been found in GNU Inetutils up to 2.7. This impacts an unknown function of the component telnetd. Executing a manipulation of the argument User can lead to argument injection.
This vulnerability is tracked as CVE-2026-24061. The attack can be launched remotely. No exploit exists.
