Skip to content
Exploit Radar Choose my productsProducts My radar
English

Products › Brands

Brand

GNU: actively exploited vulnerabilities

5 vulnerabilities in GNU products (Bash, C Library (glibc), InetUtils) are in CISA’s catalog of exploited vulnerabilities. Last added: January 26, 2026.

By category

Add just one GNU category to your radar, or open its page.

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

  • Bash 3 vulnerabilities · Operating systems
  • C Library (glibc) 1 vulnerability · Operating systems
  • InetUtils 1 vulnerability · Operating systems

Name used by CISA: GNU. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this GNU list.

  1. Rank 1GNU InetUtils

    CVE-2026-24061

    GNU InetUtils Argument Injection Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Jan 26, 2026
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

  2. Rank 2GNU Bash

    CVE-2014-6278

    CVE from 2014, added in 2025

    GNU Bash OS Command Injection Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Oct 2, 2025
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  3. Rank 3GNU Bash

    CVE-2014-6271

    CVE from 2014, added in 2022

    GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jan 28, 2022
    CISA deadline
    181 days
    CVSS severity
    9.8 (critical)

  4. Rank 4GNU Bash

    CVE-2014-7169

    CVE from 2014, added in 2022

    GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jan 28, 2022
    CISA deadline
    181 days
    CVSS severity
    9.8 (critical)

  5. Rank 5GNU C Library (glibc)

    CVE-2023-4911

    GNU C Library Buffer Overflow Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 21, 2023
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

Follow and verify

Get new GNU vulnerabilities: RSS feed (add it to Outlook, Teams, Slack or your feed reader).

Indicative classification, based on the vendor and product names given by CISA. How products are classified.