Login Request a demo
IN
Product
inetutils
by GNU · last CVE Mar 13, 2026
On CISA KEVExploited in the wild
8
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news3Timeline
Severity mix
Critical 2High 3Medium 2Low 0
Severity
All severities8Critical2High3Medium2Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add inetutils to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-40491
6.5
1%
Sep 3
The ftp client in GNU Inetutils before 2.2 does not validate addresses returned by PASV/LSPV responses to make sure they match the server address
Affected: before 2.2
CVE-2026-32772
4.7
0%
Mar 13
telnet in GNU inetutils through 2.7 allows servers to read arbitrary environment variables from clients via NEW_ENVIRON SEND USERVAR
Affected: through 2.7
Showing 2