telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable.
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2026-24061.json"