CVE-2026-32772 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	3.4 LOW	NETWORK	HIGH	NONE	CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N

Base Score

CVSS 3.x

EPSS Score

Percentile: 8%

Affected Products (NVD)

Vendor	Product	Version
gnu	inetutils	𝑥 ≤ 2.7

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

inetutils

bookworm	2:2.4-2+deb12u3 fixed
bookworm (security)	2:2.4-2+deb12u3 fixed
bullseye	vulnerable
bullseye (security)	2:2.0-1+deb11u4 fixed
forky	2:2.8-3 fixed
sid	2:2.8-3 fixed
trixie	2:2.6-3+deb13u3 fixed
trixie (security)	2:2.6-3+deb13u3 fixed

Ubuntu Releases

Ubuntu Product

Codename

inetutils

bionic	Fixed 2:1.9.4-3ubuntu0.1+esm5 released
focal	Fixed 2:1.9.4-11ubuntu0.2+esm4 released
jammy	Fixed 2:2.2-2ubuntu0.2+esm1 released
noble	Fixed 2:2.5-3ubuntu4.2 released
questing	Fixed 2:2.6-1ubuntu3.2 released
resolute	Fixed 2:2.7-2ubuntu1.1 released
trusty	Fixed 2:1.9.2-1ubuntu0.1~esm4 released
xenial	ignored

Known Exploits!

Common Weakness Enumeration

CWE-669 - Incorrect Resource Transfer Between Spheres
The product does not properly transfer a resource/behavior to another sphere, or improperly imports a resource/behavior from another sphere, in a manner that provides unintended control over that resource.

References

https://www.openwall.com/lists/oss-security/2026/03/13/1

https://www.openwall.com/lists/oss-security/2026/03/13/1