GNU
5 GNU flaws are on CISA's list of vulnerabilities attackers have used, 1 of them added in 2026. The latest was added Jan 26, 2026.
5on CISA's list, all time
1added in 2026
0in the last 90 days
0used by ransomware
1zero-days, all time
Exploited flaws added each year
Most-hit products
| Product | Exploited flaws | Most recent |
|---|---|---|
| Bourne-Again Shell (Bash) | 2 | Jan 28, 2022 |
| InetUtils | 1 | Jan 26, 2026 |
| GNU Bash | 1 | Oct 2, 2025 |
| GNU C Library | 1 | Nov 21, 2023 |
Latest GNU flaws
- InetUtilsGNU InetUtils Argument Injection Vulnerability
- GNU BashGNU Bash OS Command Injection Vulnerability
- GNU C LibraryGNU C Library Buffer Overflow Vulnerability
- Bourne-Again Shell (Bash)GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
- Bourne-Again Shell (Bash)GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
Counts come from CISA's Known Exploited Vulnerabilities catalog, which lists flaws with reliable evidence of real attacks. A higher count often reflects how widely a vendor's products are used and targeted, not only how secure they are.