GNU

Exploited now

CVEs on CISA's known-exploited list, newest first. "Days to KEV" counts from the CVE's publication.

• 9.8CriticalJan 26, 2026GNU InetUtils Code / command injectionCVE-2026-24061GNU InetUtils contains an argument injection vulnerability in telnetd that could allow for remote authentication bypass via a "-f root" value for the USER environment variable.Added to KEV Jan 26, 2026Exploited99% likelyExploit codeExploit-DB · MetasploitDetection
• 8.8HighSep 30, 2014GNU Bash Code / command injectionCVE-2014-6278GNU Bash contains an OS command injection vulnerability which allows remote attackers to execute arbitrary commands via a crafted environment.Added to KEV Oct 2, 2025 · 4,020 days after publicationExploited100% likelyExploit codeExploit-DB · Metasploit
• 7.8HighOct 3, 2023GNU C Library Memory corruptionCVE-2023-4911GNU C Library's dynamic loader ld.so contains a buffer overflow vulnerability when processing the GLIBC_TUNABLES environment variable, allowing a local attacker to execute code with elevated privileges.Added to KEV Nov 21, 2023 · 48 days after publicationExploited64% likelyExploit codeExploit-DB · Metasploit
• 9.8CriticalSep 25, 2014GNU Bourne-Again Shell (Bash) Code / command injectionCVE-2014-7169GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code. This CVE correctly remediates the vulnerability in CVE-2014-6271.Added to KEV Jan 28, 2022 · 2,682 days after publicationExploited100% likelyExploit codeExploit-DB
• 9.8CriticalSep 24, 2014GNU Bourne-Again Shell (Bash) Code / command injectionCVE-2014-6271GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code.Added to KEV Jan 28, 2022 · 2,682 days after publicationExploited100% likelyExploit codeExploit-DB · Metasploit · NucleiDetection

Recent

• 6.1MediumOct 28, 2026GNU mtools Memory corruptionCVE-2026-118384GNU mtools through 4.0.49 has an out-of-bounds write in parse_vses in vfat.c.
• 5.3MediumJul 13, 2026GNU LibreDWG Memory corruptionCVE-2026-15520A vulnerability was determined in GNU LibreDWG 0.13.4-154-g0b573035. This impacts the function decompress_R2004_section of the file src/decode.c of the component R2004 Section Decompression. Executing a manipulation can lead to heap-based buffer overflow. The attack requires local access. The exploit has been publicly disclosed and may be utilized. Upgrading to version 0.14.8396 will fix this issue. This patch is called 3d0f9fc2eddbd6579c99af3111c37c98f03475d0. You should upgrade the affected co
• 7.5HighJun 29, 2026Gnu gzip Memory corruptionCVE-2026-41992GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompression formats within a single execution. GNU gzip maintains a global array that is shared across the LZ77, LZW, and LZH decompression routines and is not reinitialized between files processed in the same invocation. By decompressing a specially crafted LZW file followed by a specially crafted LZH file in a single gzip -d command, an att
• 4.7MediumJun 29, 2026Gnu gzipCVE-2026-41991GNU gzip contains a vulnerability in the gzexe utility related to insecure temporary file handling. When the mktemp utility is not available in the user’s PATH, gzexe falls back to constructing a temporary file path based solely on the process ID (PID). This predictable filename is created without exclusive access or existence checks. A local attacker can pre‑create the predicted temporary file path as a symbolic link pointing to an arbitrary file writable by the victim. When gzexe runs, it foll
• 7.5HighMay 18, 2026gnutlsCVE-2026-42009A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not correctly handle packets with duplicate sequence numbers. This could lead to unstable packet ordering or undefined behavior, resulting in a denial of service.1.3% likely
• 7.1HighMay 7, 2026gnutls Auth bypass / access controlCVE-2026-42010A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a specially crafted username, leading to an authentication bypass. This vulnerability allows an attacker to gain unauthorized access by circumventing the authentication process.1.1% likely
• 9.8CriticalMar 13, 2026GNU inetutils Memory corruptionCVE-2026-32746telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because add_slc does not check whether the buffer is full.44% likelyExploit-DBDetection
• 9.8CriticalJan 26, 2026GNU InetUtils Code / command injectionCVE-2026-24061GNU InetUtils contains an argument injection vulnerability in telnetd that could allow for remote authentication bypass via a "-f root" value for the USER environment variable.Exploited99% likelyExploit codeExploit-DB · MetasploitDetection
• 8.8HighSep 30, 2014GNU Bash Code / command injectionCVE-2014-6278GNU Bash contains an OS command injection vulnerability which allows remote attackers to execute arbitrary commands via a crafted environment.Exploited100% likelyExploit codeExploit-DB · Metasploit
• 7.8HighOct 3, 2023GNU C Library Memory corruptionCVE-2023-4911GNU C Library's dynamic loader ld.so contains a buffer overflow vulnerability when processing the GLIBC_TUNABLES environment variable, allowing a local attacker to execute code with elevated privileges.Exploited64% likelyExploit codeExploit-DB · Metasploit
• 9.8CriticalSep 24, 2014GNU Bourne-Again Shell (Bash) Code / command injectionCVE-2014-6271GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code.Exploited100% likelyExploit codeExploit-DB · Metasploit · NucleiDetection
• 9.8CriticalSep 25, 2014GNU Bourne-Again Shell (Bash) Code / command injectionCVE-2014-7169GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code. This CVE correctly remediates the vulnerability in CVE-2014-6271.Exploited100% likelyExploit codeExploit-DB

See every GNU entry on the dashboard.

Top products

• InetUtils2 CVEs in the last year, 2 critical, 1 exploited
• gzip2 CVEs in the last year
• gnutls2 CVEs in the last year
• mtools1 CVE in the last year
• LibreDWG1 CVE in the last year

Advisories

Official advisories from the last 90 days that name this vendor's CVEs.

• Synology · Mar 19, 2026Synology-SA-26:03 GNU InetutilsCVE-2026-32746