← Back to CVEs
CVE-2026-32772
LOW3.4
Description
telnet in GNU inetutils through 2.7 allows servers to read arbitrary environment variables from clients via NEW_ENVIRON SEND USERVAR.
CVE Details
CVSS v3.1 Score3.4
SeverityLOW
CVSS VectorCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N
Attack VectorNETWORK
ComplexityHIGH
Privileges RequiredNONE
User InteractionREQUIRED
Published3/16/2026
Last Modified3/16/2026
Sourcenvd
Honeypot Sightings0
Weaknesses (CWE)
CWE-669
References
https://www.openwall.com/lists/oss-security/2026/03/13/1(cve@mitre.org)
https://www.openwall.com/lists/oss-security/2026/03/13/1(134c704f-9b21-4f2e-91b3-4a467353bcc0)
IOC Correlations
No correlations recorded
This product uses data from the NVD API but is not endorsed or certified by the NVD.