VULNERABILITY INTELLIGENCE

CVE-2026-32772

CVSS score3.4 LOW
EPSS probability0.19%
CISA KEVNot currently listed
Published2026-03-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N

Description

telnet in GNU inetutils through 2.7 allows servers to read arbitrary environment variables from clients via NEW_ENVIRON SEND USERVAR.

Weakness classification

  • cve@mitre.org: CWE-669

Primary references