GNU known exploited vulnerabilities
CISA's Known Exploited Vulnerabilities catalog lists 5 GNU vulnerabilities: 1 added in the last 365 days, 3 rated critical (CVSS 9 or higher), and 0 with known ransomware use. The most recent was added Jan 26, 2026.
RSS feed for GNU exploited vulnerabilities · Search them on KEVWire · Ask your AI assistant
| Added to KEV | CVE | Vulnerability | CVSS | EPSS | Federal due date | Ransomware use |
|---|---|---|---|---|---|---|
| 2026-01-26 | CVE-2026-24061 | GNU InetUtils Argument Injection Vulnerability | 9.8 (v3.1) | 99.0% | 2026-02-16 | Unknown |
| 2025-10-02 | CVE-2014-6278 | GNU Bash OS Command Injection Vulnerability | 8.8 (v3.1) | 99.7% | 2025-10-23 | Unknown |
| 2023-11-21 | CVE-2023-4911 | GNU C Library Buffer Overflow Vulnerability | 7.8 (v3.1) | 63.8% | 2023-12-12 | Unknown |
| 2022-01-28 | CVE-2014-6271 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability | 9.8 (v3.1) | >99.9% | 2022-07-28 | Unknown |
| 2022-01-28 | CVE-2014-7169 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability | 9.8 (v3.1) | >99.9% | 2022-07-28 | Unknown |