CVE-2021-47765

AbsoluteTelnet 11.24 - 'Username' Denial of Service (PoC)

CVSS 6.7 MEDIUMEPSS 0.2%CWE-787

Vexday Risk Score

13Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 6.7EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

15 Jan 2026Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

AbsoluteTelnet 11.24 contains a denial of service vulnerability that allows local attackers to crash the application by manipulating username and error report fields. Attackers can trigger the crash by inserting 1000 characters into the username or email address fields, causing the application to become unresponsive.

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected products

Celestialsoftware · AbsoluteTelnet

References

https://www.celestialsoftware.net/https://www.exploit-db.com/exploits/50510