CVE-2026-24061

Aliases:GCVE-1-2026-0007

Analyzed

Published: 21 Jan 2026, 06:42

Last modified:29 Jan 2026, 18:14

Vulnerability Summary

Overall Risk (default)

critical

90/100

CVSS Score

10 CRITICAL

v4.0 (gcve)

EPSS Score

29.55% HIGH

30% probability 0.00%

KEV

Listed

CISA

1 listing

Ransomware

No reports

Public exploits

2 found

Dark Web

Not detected

Timeline

21 Jan 2026, 06:42

Published

Vulnerability first disclosed

26 Jan 2026, 00:00

Added to CISA KEV

GNU InetUtils Argument Injection Vulnerability

29 Jan 2026, 18:14

Last Modified

Vulnerability information updated

16 Feb 2026, 00:00

CISA Remediation Due

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Description

CVSS Metrics

EPSS Trends

Weaknesses (CWE)

KEV Details

Exploits (2)

Affected Systems

References (13)