← back
CVE-2026-8276

bettercap MySQL Server mysql_server.go integer coercion

CVSS 6.3 MEDIUMEPSS 0.4%CWE-189CWE-192
A flaw has been found in bettercap up to 2.41.5. Affected by this issue is some unknown functionality of the file modules/mysql_server/mysql_server.go of the component MySQL Server. Executing a manipulation can lead to integer coercion error. The attack can be launched remotely. The attack requires a high level of complexity. The exploitation is known to be difficult. The exploit has been published and may be used. This patch is called 0eaa375c5e5446bfba94a290eff92967a5deac9e. It is advisable to implement a patch to correct this issue.
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
n/a · bettercap
public PoCs found — 1
cve_referencegithub.com/bettercap/bettercap/issues/1265#issue-4287957382unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://github.com/bettercap/bettercap/https://github.com/bettercap/bettercap/commit/0eaa375c5e5446bfba94a290eff92967a5deac9ehttps://github.com/bettercap/bettercap/issues/1265https://github.com/bettercap/bettercap/issues/1265#issue-4287957382https://github.com/bettercap/bettercap/pull/1266https://vuldb.com/submit/811163https://vuldb.com/vuln/362573https://vuldb.com/vuln/362573/cti