Rohitberiwala/CVE-2026-28372-telnetd-Privilege-Escalation

PoC

This Proof‑of‑Concept demonstrates a **Local Privilege Escalation** vulnerability in GNU inetutils `telnetd`. `telnetd` improperly passes client‑controlled environment variables to `login(1)`. By setting:

view exploit source poc_in_githubauthor Rohitberiwalapublished 2026-03-07catalog poc_in_github
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2026-28372UShigh7.8Exploit
telnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by abusing systemd service credentials support added to the login(1) implementation of util-l…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan