CVE-2021-47765CWE-787

AbsoluteTelnet 11.24 - 'Username' Denial of Service (PoC)

Medium · published January 15, 2026

CVSS v4.0
6.7
EPSS
0%
Percentile
8.6
In the wild
Unconfirmed
What it is

AbsoluteTelnet 11.24 contains a denial of service vulnerability that allows local attackers to crash the application by manipulating username and error report fields. Attackers can trigger the crash by inserting 1000 characters into the username or email address fields, causing the application to become unresponsive.

The record
Technical detail
CVSS v4.0
6.7 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00194 · 8.6th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-01-15T15:52Z
EPSS history
Timeline
  • 15 JAN 15:52Z
    AbsoluteTelnet 11.24 - 'Username' Denial of Service (PoC)
    cvelistv5