Vendor

GNU

5 of 5 GNU CVEs in Patchfirst (100%) are in of vulnerabilities exploited in the wild.

CVEs: 5
In CISA KEV: 5100%
Known ransomware use: 0
Median days to KEV: 2,682; from publication
Latest KEV listing: 26 Jan 2026

Watch GNU Subscribe (RSS) JSON Feed All feeds

Products

In KEVOther CVEs

ProductKEVCVEs
Bourne-Again Shell (Bash) In KEV: 2 CVEs: 2
GNU Bash In KEV: 1 CVEs: 1
GNU C Library In KEV: 1 CVEs: 1
InetUtils In KEV: 1 CVEs: 1

Top ATT&CK techniques

What attackers do with GNU CVEs

TechniqueCVEs
T1190Exploit Public-Facing Application CVEs: 3
T1059.004Unix Shell CVEs: 3
T1133External Remote Services CVEs: 2
T1078Valid Accounts CVEs: 1
T1068Exploitation for Privilege Escalation CVEs: 1

Open in ATT&CK Navigator

A layer for MITRE’s ATT&CK Navigator: techniques scored by the highest Patchfirst priority among their CVEs, neutral to red, with the CVE ids in each comment. “Open in Navigator” loads https://patchfirst.co/navigator/vendor/gnu.json. Or download it and in Navigator choose Open Existing Layer → Upload from local.

Counts are GNU CVEs linked to the technique. Each link’s provenance is on the CVE page.

GNU CVEs

5 CVEs, by priority

CVE-2026-24061GNU InetUtils Argument Injection Vulnerability
GNU · InetUtilsKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing Application T1078Valid Accounts
99.0%Top 0.07%
84.8priority
CVE-2023-4911GNU C Library Buffer Overflow Vulnerability
GNU · GNU C LibraryKEVPublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation
63.8%Top 0.78%
78.3priority
CVE-2014-6271GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
GNU · Bourne-Again Shell (Bash)KEVPublic exploitCritical · 9.8T1133External Remote Services T1190Exploit Public-Facing Application+1 more · 2 reports
>99.9%Top 0.01%
76.0priority
CVE-2014-6278GNU Bash OS Command Injection Vulnerability
GNU · GNU BashKEVPublic exploitHigh · 8.8T1059.004Unix Shell1 report
99.7%Top 0.05%
73.0priority
CVE-2014-7169GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
GNU · Bourne-Again Shell (Bash)KEVPublic exploitCritical · 9.8T1133External Remote Services T1190Exploit Public-Facing Application+1 more
99.9%Top 0.03%
69.9priority