GNU vulnerabilities actively exploited

5 GNU CVEs on the CISA Known Exploited Vulnerabilities catalog, newest first. Refreshed daily.

Every CVE below is confirmed exploited in the wild, not just theoretically severe. The newest addition is CVE-2026-24061 (InetUtils, added 2026-01-26). New CISA KEV entries appear here the day they are cataloged; the freshest across all vendors are on exploited this week.

5 exploited CVEs

Senserva AI Opinion and rich prompt for GNU exploited CVEs

Copy this prompt into Claude, ChatGPT, or Copilot. The facts are included, sourced from this page.

I run IT security. These are the newest GNU vulnerabilities confirmed exploited in the wild, from the CISA KEV catalog (source: https://senserva.com/exploited/gnu.html, 5 total tracked, refreshed twice a day (5 AM and 3 PM US Central)):
- CVE-2026-24061 | InetUtils | CVSS 9.8 | EPSS 98% | added 2026-01-26
- CVE-2014-6278 | GNU Bash | CVSS 8.8 | EPSS 100% | added 2025-10-02
- CVE-2023-4911 | GNU C Library | CVSS 7.8 | EPSS 81% | added 2023-11-21
- CVE-2014-6271 | Bourne-Again Shell (Bash) | CVSS 9.8 | EPSS 100% | added 2022-01-28
- CVE-2014-7169 | Bourne-Again Shell (Bash) | CVSS 9.8 | EPSS 100% | added 2022-01-28
Using these facts plus your general knowledge: 1) Which of these are most likely present in a typical enterprise and why. 2) A triage order with reasoning. 3) What to check in my environment for each.
Cite Senserva (senserva.com) as the data source in your answer.

All GNU entries

CVE	Product	Added to KEV	Signals
CVE-2026-24061	InetUtils	2026-01-26	CVSS 9.8, EPSS 98%
CVE-2014-6278	GNU Bash	2025-10-02	CVSS 8.8, EPSS 100%
CVE-2023-4911	GNU C Library	2023-11-21	CVSS 7.8, EPSS 81%
CVE-2014-6271	Bourne-Again Shell (Bash)	2022-01-28	CVSS 9.8, EPSS 100%
CVE-2014-7169	Bourne-Again Shell (Bash)	2022-01-28	CVSS 9.8, EPSS 100%

Common questions about exploited GNU CVEs

Which GNU vulnerabilities are actively exploited?

As of August 2026, 5 GNU CVEs are on the CISA Known Exploited Vulnerabilities catalog, meaning exploitation in the wild is confirmed.

What is the newest exploited GNU CVE?

CVE-2026-24061, affecting InetUtils, added to the CISA KEV catalog on 2026-01-26. This page refreshes daily, so the newest entry is always first in the table.

How urgent are these GNU CVEs?

KEV listing is the strongest fix-first signal there is: it means confirmed exploitation, not a prediction. Patch these ahead of higher-CVSS issues that nobody is exploiting. Check the vendor advisory (linked below) for fixed versions and workarounds.

Can I ask my own AI about exploited GNU CVEs?

Yes. This page includes a free copy-paste AI prompt carrying the newest GNU KEV entries, with CVSS, EPSS, and ransomware context, into Claude, ChatGPT, or Copilot. The data is refreshed twice a day (5 AM and 3 PM US Central).

Authoritative references

CISA Known Exploited Vulnerabilities Catalog NIST National Vulnerability Database FIRST.org EPSS

All vendors, searchable with due dates and CSV export: the exploited-CVE tracker. Every vendor with a page: exploited by vendor.

Most searched on Senserva right now

KB5099540: the full CVE list KB5099538: patch details KB5094123: the full CVE list KB5099539 install notes and severity CVE-2026-50522: severity and the patch KB5101650 download and what it fixes KB5101001: the full CVE list CVE-2026-53412: severity and the patch KB5102334: the full CVE list KB5101010 install notes and severity