e-m-b-a/emba

Emulation check for CVE-2026-24061 – GNU InetUtils telnetd Authentication Bypass Vulnerability

Open

#1,905 opened on Mar 12, 2026

View on GitHub
 (1 comment) (0 reactions) (0 assignees)Shell (314 forks)auto 404
EMBASystem emulator (Lxx)enhancementgood first issuehelp wantedstale

Repository metrics

Stars
 (3,565 stars)
PR merge metrics
 (PR metrics pending)

Description

Is your feature request related to a problem? Please describe. We should check the telnet authentication bypass vulnerability in our system emulator - see also https://www.offsec.com/blog/cve-2026-24061/

Describe the solution you'd like A new L24_telnet_check.sh module for testing this module

PoC:

USER='-f root' telnet -a <ipaddr>

Describe alternatives you've considered Static analysis for version of telnet binary should be also ensured that EMBA detects this vulnerability.

Contributor guide

Research direction
Create a new module L24 telnet check.sh that tests for the telnet authentication bypass vulnerability. Use the PoC provided: USER=' f root' telnet a <ipaddr>. Also consider static analysis of the telnet binary version.
Tech stack
shell
Domain
security
Issue type
Feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-3 hours
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Clear
Prerequisites
Shell scriptingUnderstanding of EMBA module structure
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
60