Brand
GNU: actively exploited vulnerabilities
5 vulnerabilities in GNU products (Bash, C Library (glibc), InetUtils) are in CISA’s catalog of exploited vulnerabilities. Last added: January 26, 2026.
-
1 vulnerability added in the last 12 months
-
5 exploited vulnerabilities in the catalog, in total
-
0 added in the last 30 days
By category
Add just one GNU category to your radar, or open its page.
- Operating systems 5 vulnerabilities
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
Affected products
Follow a single GNU product (Bash, C Library (glibc)…) rather than the whole brand.
- Bash3 vulnerabilities, Operating systems
- C Library (glibc)1 vulnerability, Operating systems
- InetUtils1 vulnerability, Operating systems
Name used by CISA: GNU. Product families: indicative classification by this site.
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this GNU list.
- Rank 1
GNU InetUtilsCVE-2026-24061
GNU InetUtils Argument Injection Vulnerability
CVSS severity 9.8critical
Added Jan 26, 2026
- Rank 2
GNU BashCVE-2014-6271
GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
CVE from 2014, added in 2022
CVSS severity 9.8critical
Added Jan 28, 2022
- Rank 3
GNU BashCVE-2014-7169
GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
CVE from 2014, added in 2022
CVSS severity 9.8critical
Added Jan 28, 2022
- Rank 4
GNU BashCVE-2014-6278
GNU Bash OS Command Injection Vulnerability
CVE from 2014, added in 2025
CVSS severity 8.8high
Added Oct 2, 2025
- Rank 5
GNU C Library (glibc)CVE-2023-4911
GNU C Library Buffer Overflow Vulnerability
CVSS severity 7.8high
Added Nov 21, 2023
Follow and verify
Get new GNU vulnerabilities: RSS feed (add it to Outlook, Teams, Slack or your feed reader).
Indicative classification, based on the vendor and product names given by CISA. How products are classified.