PT-2026-39576 · Ettercap · Ettercap

Dapickle · Published 2026-05-11 · Updated 2026-05-11 · CVE-2026-8276

Positive Technologies (AI Summary)

CVSS v3.1

3.7

Low

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions bettercap versions prior to 2.41.6

Description A flaw in the MySQL Server component, specifically within the modules/mysql server/mysql server.go file, allows a remote attacker to trigger an integer coercion error. Integer coercion occurs when a value is converted from one data type to another, potentially leading to unexpected behavior or crashes. This attack requires a high level of complexity and is difficult to exploit.

Recommendations Apply patch 0eaa375c5e5446bfba94a290eff92967a5deac9e to resolve the issue. As a temporary workaround, restrict access to the modules/mysql server/mysql server.go module to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-189

CWE-192

Related Identifiers

CVE-2026-8276

Affected Products

Ettercap

References · 10

• 🔥 https://github.com/bettercap/bettercap/issues/1265#issue-4287957382 · Exploit
• https://github.com/bettercap/bettercap/pull/1266 · Patch
• https://github.com/bettercap/bettercap/commit/0eaa375c5e5446bfba94a290eff92967a5deac9e · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-8276 · Security Note
• https://github.com/bettercap/bettercap/issues/1265 · Note
• https://vuldb.com/vuln/362573/cti · Note
• https://vuldb.com/vuln/362573 · Note
• https://vuldb.com/submit/811163 · Note
• https://twitter.com/VulmonFeeds/status/2053744061517869498 · Twitter Post
• https://github.com/bettercap/bettercap · Note