---
title: "GNU: known exploited vulnerabilities"
url: https://erroneo.us/security/vendor/gnu/
description: "Every GNU vulnerability in CISA's Known Exploited Vulnerabilities catalog since October 2023 (3), newest first, with due dates and fixes."
type: vendor
section: "Security Digest"
date_modified: 2026-01-26
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# GNU: known exploited vulnerabilities

- 2026-01-26 [CVE-2026-24061](https://erroneo.us/security/cve/CVE-2026-24061/index.md) GNU InetUtils: GNU InetUtils Argument Injection Vulnerability (due 2026-02-16; ransomware: Unknown)
- 2025-10-02 [CVE-2014-6278](https://erroneo.us/security/cve/CVE-2014-6278/index.md) GNU GNU Bash: GNU Bash OS Command Injection Vulnerability (due 2025-10-23; ransomware: Unknown)
- 2023-11-21 [CVE-2023-4911](https://erroneo.us/security/cve/CVE-2023-4911/index.md) GNU GNU C Library: GNU C Library Buffer Overflow Vulnerability (due 2023-12-12; ransomware: Unknown)

---
Source page: https://erroneo.us/security/vendor/gnu/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt