CVE-2026-13589
Last modified
CVE-2026-13589 is a medium-severity vulnerability rated 5.6/10 on the CVSS scale. A vulnerability was identified in seladb PcapPlusPlus 25.05. This affects the function pcpp::TelnetLayer::getSubCommand of the file Packet++/src/TelnetLayer.cpp of the component Telnet Subnegotiation Packet Handler.
Description
A vulnerability was identified in seladb PcapPlusPlus 25.05. This affects the function pcpp::TelnetLayer::getSubCommand of the file Packet++/src/TelnetLayer.cpp of the component Telnet Subnegotiation Packet Handler. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitability is reported as difficult. The exploit is publicly available and might be used. The identifier of the patch is 98e671010bc7c87b95898c22ae289220ae92542b. It is recommended to apply a patch to fix this issue.
Metrics
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| seladb | PcapPlusPlus | 25.05 |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-13589?
How severe is CVE-2026-13589?
How do I fix CVE-2026-13589?
Related CVEs from 2026
- CVE-2026-13580A security vulnerability has been detected in Edimax EW-7478…8.8
- CVE-2026-13581A vulnerability was detected in Edimax EW-7478APC 1.04. This…6.3
- CVE-2026-13582A flaw has been found in Edimax EW-7478APC 1.04. This issue …8.8
- CVE-2026-13583A vulnerability has been found in Edimax EW-7478APC 1.04. Im…8.8
- CVE-2026-13587A vulnerability was found in seladb PcapPlusPlus 25.05. The …3.7
- CVE-2026-13588A vulnerability was determined in seladb PcapPlusPlus 25.05.…5.6
- CVE-2026-1359The Genolve – AI image AI video generation plugin for WordPr…8.8
- CVE-2026-13590A security flaw has been discovered in seladb PcapPlusPlus 2…5.6
- CVE-2026-13591A weakness has been identified in DeepMyst Mysti 0.4.0. Affe…5
- CVE-2026-13592A vulnerability was detected in liftoff-sr CIPster up to e8e…7.3
- CVE-2026-13593CSS::Minifier::XS versions before 0.14 for Perl have a memor…6.5
- CVE-2026-13595A flaw was found in the libblkid library of util-linux. Duri…5.3
Are you affected by CVE-2026-13589?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST