Exploited vulnerabilities
GNU
5 GNU vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.
In the catalogue5
Last 12 months1
In ransomware campaigns0
Last addition26 January 2026
The vulnerabilities5
- 26 January 2026CVE-2026-24061InetUtilsGNU InetUtils Argument Injection Vulnerability
- 2 October 2025CVE-2014-6278GNU BashGNU Bash OS Command Injection Vulnerability
- 21 November 2023CVE-2023-4911GNU C LibraryGNU C Library Buffer Overflow Vulnerability
- 28 January 2022CVE-2014-7169Bourne-Again Shell (Bash)GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
- 28 January 2022CVE-2014-6271Bourne-Again Shell (Bash)GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.
Alerts only on the products you use
With My Defence you receive alerts and briefings only on the products you use, GNU included.