Researchers have identified a decades-old, critical buffer overflow vulnerability, CVE-2026-32746, affecting the Telnet protocol's LINEMODE negotiation handler across numerous Linux distributions and various legacy network-connected systems.

Key Points

• The vulnerability, discovered by the DREAM Security Research Team, has existed in Telnetd implementations since 1994.
• It is a BSS-based buffer overflow located in the LINEMODE SLC (Set Linemode Characters) negotiation handler.
• Affected systems include Debian, Ubuntu, FreeBSD, NetBSD, Citrix NetScaler, and various embedded devices.
• Exploitation is highly complex and environment-dependent, requiring custom tailoring to specific memory layouts and compiler configurations.
• The vulnerability remains unpatched in many official repositories, including the latest inetutils-telnetd version 2.7.

Why it Matters

This discovery highlights the persistent security risks posed by legacy protocols like Telnet, which remain in use on critical infrastructure and industrial hardware despite being inherently insecure. Because the vulnerability is embedded in widely copied code, it creates a vast, fragmented attack surface that is difficult for organizations to identify and remediate effectively.