ZeusQA
Start free

Known exploited vulnerabilities

GNU vulnerabilities attackers have used

Every GNU vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 5 GNU vulnerabilities as exploited in the wild, 1 of them added in the last 12 months. The most recent is CVE-2026-24061, added Jan 26, 2026. Bourne-Again Shell (Bash) has the most entries (2).

In KEV, all time
5
Added, last 12 months
1
Used in ransomware
0
New CVEs this week
0

By product

Bourne-Again Shell (Bash) (2), GNU Bash (1), GNU C Library (1), InetUtils (1).

Every GNU entry in CISA KEV

  1. CVE-2026-24061

    Added · due

    GNU InetUtils Argument Injection Vulnerability

    GNU InetUtils contains an argument injection vulnerability in telnetd that could allow for remote authentication bypass via a "-f root" value for the USER environment variable.

  2. CVE-2014-6278

    Added · due

    GNU Bash OS Command Injection Vulnerability

    GNU Bash contains an OS command injection vulnerability which allows remote attackers to execute arbitrary commands via a crafted environment.

  3. CVE-2023-4911

    Added · due

    GNU C Library Buffer Overflow Vulnerability

    GNU C Library's dynamic loader ld.so contains a buffer overflow vulnerability when processing the GLIBC_TUNABLES environment variable, allowing a local attacker to execute code with elevated privileges.

  4. CVE-2014-7169

    Added · due

    GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

    GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code. This CVE correctly remediates the vulnerability in CVE-2014-6271.

  5. CVE-2014-6271

    Added · due

    GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

    GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code.

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works