// LIVE

INTELCritical Citrix NetScaler memory flaw actively exploited in attacks

INTELTelnyx joins LiteLLM in latest PyPI package poisoning tied to Trivy breach

INTELStorm Brews Over Critical, No-Click Telegram Flaw

INTELFTC Action Against Match and OkCupid for Deceiving Users, Sharing Personal Data

INTELTeamPCP Supply Chain Campaign: Update 004 - Databricks Investigating Alleged Com

INTELHealthcare IT Platform CareCloud Probing Potential Data Breach

INTELSecurity updates for Monday

INTEL'When intelligence and trust move together, AI stops being an experiment and sta

INTELRussian APT Star Blizzard Adopts DarkSword iOS Exploit Kit

INTELDisclosure of Replay Attack Vulnerability in Signed References

INTELHackers now exploit critical F5 BIG-IP flaw in attacks, patch now

INTELTelnyx Targeted in Growing TeamPCP Supply Chain Attack

CVE(Pwn2Own) Canon imageCLASS MF654Cdw TTF Parsing Out-Of-Bounds Write Remote Code

CVEZDI-26-204: Canon imageCLASS MF654Cdw XPS Parser Vulnerability

CVEZDI-26-202: QNAP TS-453E Hyper Data Protector Plugin SQL Injection RCE Vulnerabi

INTELCritical Citrix NetScaler memory flaw actively exploited in attacks

INTELTelnyx joins LiteLLM in latest PyPI package poisoning tied to Trivy breach

INTELStorm Brews Over Critical, No-Click Telegram Flaw

INTELFTC Action Against Match and OkCupid for Deceiving Users, Sharing Personal Data

INTELTeamPCP Supply Chain Campaign: Update 004 - Databricks Investigating Alleged Com

INTELHealthcare IT Platform CareCloud Probing Potential Data Breach

INTELSecurity updates for Monday

INTEL'When intelligence and trust move together, AI stops being an experiment and sta

INTELRussian APT Star Blizzard Adopts DarkSword iOS Exploit Kit

INTELDisclosure of Replay Attack Vulnerability in Signed References

INTELHackers now exploit critical F5 BIG-IP flaw in attacks, patch now

INTELTelnyx Targeted in Growing TeamPCP Supply Chain Attack

CVE(Pwn2Own) Canon imageCLASS MF654Cdw TTF Parsing Out-Of-Bounds Write Remote Code

CVEZDI-26-204: Canon imageCLASS MF654Cdw XPS Parser Vulnerability

CVEZDI-26-202: QNAP TS-453E Hyper Data Protector Plugin SQL Injection RCE Vulnerabi

OPS INTEL SOURCE: The Hacker News · 2026-03-19

Critical Unpatched Telnetd Flaw (CVE-2026-32746) Enables Unauthenticated Root RCE

— min read

·

GENERATED BY aria-32b

·

VIA The Hacker News

#cve-2026-32746 #telnetd #remote-code-execution

◎

ARIA ANALYSIS aria-32b · 2026-03-19

['Critical vulnerability (CVE-2026-32746) in GNU InetUtils telnet daemon enables unauthenticated remote code execution with root privileges.', 'CVSS score: 9.8/10']

TL;DR

['Critical vulnerability (CVE-2026-32746) in GNU InetUtils telnet daemon enables unauthenticated remote code execution with root privileges.', 'CVSS score: 9.8/10']

What happened

['A critical security flaw has been disclosed affecting the GNU InetUtils telnet daemon (telnetd).', 'The vulnerability allows an unauthenticated attacker to execute arbitrary code with elevated privileges.']

Why it matters for ops

['Failure to patch can lead to unauthorized access and system compromise.', 'Exploitation of this flaw could result in complete loss of control over affected systems.']

Mitigation

Disable or remove the telnet service if not needed.
Apply security patches as soon as they become available.

Action items

Review systems for any running instances of GNU InetUtils telnet daemon.
Update to the latest patched version immediately if vulnerable.

Detection IOCs

Unusual network activity related to Telnet port (23)
Unexpected root-level commands issued by remote IP addresses

Source link

https://thehackernews.com/2026/03/critical-telnetd-flaw-cve-2026-32746.html

// SOURCES

The Hacker News — Original article ↗