PT-2026-39575 · Ettercap · Ettercap

Dapickle · Published 2026-05-11 · Updated 2026-05-11 · CVE-2026-8275

Positive Technologies (AI Summary)

CVSS v3.1

3.7

Low

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions bettercap versions prior to 2.41.6

Description An integer coercion error exists in the zerogod IPP Service component within the ippReadChunkedBody() function of the modules/zerogod/zerogod ipp primitives.go file. This issue allows a remote attacker to trigger the error through specific manipulation, although the attack is characterized by high complexity and difficult exploitation.

Recommendations Deploy patch 3731d5576cffae9eefe3721cd46a40933304129f. As a temporary workaround, restrict access to the zerogod IPP Service component to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-189

CWE-192

Related Identifiers

CVE-2026-8275

Affected Products

Ettercap

References · 10

• 🔥❌ https://github.com/user-attachments/files/26852847/poc.py · Exploit, Deleted
• https://github.com/bettercap/bettercap/pull/1264 · Patch
• https://github.com/bettercap/bettercap/commit/3731d5576cffae9eefe3721cd46a40933304129f · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-8275 · Security Note
• https://github.com/bettercap/bettercap/issues/1263 · Note
• https://twitter.com/VulmonFeeds/status/2053746621964243306 · Twitter Post
• https://vuldb.com/vuln/362572 · Note
• https://vuldb.com/submit/811145 · Note
• https://github.com/bettercap/bettercap · Note
• https://vuldb.com/vuln/362572/cti · Note