CVE-2026-24061Vulnerability
GNU InetUtils Argument Injection Vulnerability
Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .
Reported by 2 independent sources · first reported by GreyNoise · last reported
Last reported 7 months ago
CISA KEVAdded 26 Jan 2026
Fix due 16 Feb 2026
Used by ransomware: not knownCISA KEV catalogue
Fix due 16 Feb 2026
Used by ransomware: not knownCISA KEV catalogue
EPSS99.0%
higher than 99% of CVEsFIRST EPSS, as of 19 Oct 2026
higher than 99% of CVEsFIRST EPSS, as of 19 Oct 2026
What the reports say
2 reports, newest first · the exact sentence from each-
A 32-Year-Old Bug Walks Into A Telnet Server (GNU inetutils Telnetd CVE-2026-32746 Pre-Auth RCE)“Everyone remembers CVE-2026-24061, right?”
-
Active Ivanti Exploitation Traced to Single Bulletproof IP—Published IOC Lists Point Elsewhere“CVE-2026-24061”
Indicators reported together
named in the same reports- 193.24.123[.]42in 1 report
- 45.129.230[.]38in 1 report
- 198.98.54[.]209in 1 report
- 156.146.45[.]26in 1 report
- 198.98.56[.]220in 1 report
Copy these 5 indicators · defanged
Also named with it: CVE-2026-1281, CVE-2026-1340, CVE-2026-21962, CVE-2025-24799, CVE-2026-32746, CVE-2005-0469
Thanks — we review every report.