Name: CVE-2026-32746: Buffer Copy without Checking Size of Input
Creator: Rapid7
Published: 2026-03-13T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2026-32746, CVSS 9.8, EPSS 0.00027

telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because add_slc does not check whether the buffer is full.

CVSS Details

CVSS 3.1 Base Score: 9.8
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alpine Linux	—	Upgrade inetutils-telnet	Oct 20, 2026	Mar 13, 2026
Debian	—	Upgrade inetutils	Apr 6, 2026	Apr 6, 2026
Ubuntu	—	Upgrade inetutils-ftp (Ubuntu Pro)Upgrade inetutils-traceroute (Ubuntu Pro)Upgrade inetutils-talkdUpgrade inetutils-ping (Ubuntu Pro)Upgrade inetutils-tools (Ubuntu Pro)Upgrade telnetdUpgrade inetutils-syslogd (Ubuntu Pro)Upgrade telnetUpgrade inetutils-pingUpgrade inetutils-tracerouteUpgrade inetutils-telnetdUpgrade inetutils-syslogdUpgrade inetutils-ftpd (Ubuntu Pro)Upgrade inetutils-ftpUpgrade inetutils-telnet (Ubuntu Pro)Upgrade inetutils-inetdUpgrade inetutils-ftpdUpgrade inetutils-toolsUpgrade inetutils-talkUpgrade inetutils-telnetUpgrade inetutils-telnetd (Ubuntu Pro)Upgrade inetutils-inetd (Ubuntu Pro)Upgrade inetutils-talk (Ubuntu Pro)Upgrade inetutils-talkd (Ubuntu Pro)	Jun 9, 2026	Jun 4, 2026

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business