RESEARCHERS WARN OF UNPATCHED, CRITICAL TELNETD FLAW AFFECTING ALL VERSIONS

Summary from the TLDR InfoSec newsletter

CVE-2026-32746 (CVSS 9.8) is an unpatched buffer overflow in GNU InetUtils telnetd's LINEMODE SLC handler affecting all versions up to 2.7 that enables unauthenticated RCE as root via a single connection to port 23.