CVE-2026-8276

A flaw has been found in bettercap up to 2.41.5. Affected by this issue is some unknown functionality of the file modules/mysql_server/mysql_server.go of the component MySQL Server. Executing a manipulation can lead to integer coercion error. The attack can be launched remotely. The attack requires a high level of complexity. The exploitation is known to be difficult. The exploit has been published and may be used. This patch is called 0eaa375c5e5446bfba94a290eff92967a5deac9e. It is advisable to implement a patch to correct this issue.

• CWE-189
• CWE-192

• https://github.com/bettercap/bettercap/
• https://github.com/bettercap/bettercap/commit/0eaa375c5e5446bfba94a290eff92967a5deac9e
• https://github.com/bettercap/bettercap/issues/1265
• https://github.com/bettercap/bettercap/issues/1265#issue-4287957382
• https://github.com/bettercap/bettercap/pull/1266
• https://vuldb.com/submit/811163
• https://vuldb.com/vuln/362573
• https://vuldb.com/vuln/362573/cti

Published

May 11, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-82754Improper Protection of Alternate Path vulnerability in ash-p…6.3
• CVE-2026-82755Use of Cache Containing Sensitive Information vulnerability …6.3
• CVE-2026-82756Improper Encoding or Escaping of Output vulnerability in ash…6.3
• CVE-2026-82757Server-Side Request Forgery (SSRF) vulnerability in ash-proj…6.3
• CVE-2026-82758Improper Authentication vulnerability in ash-project ash_aut…6.3
• CVE-2026-82759Use of a One-Way Hash with a Predictable Salt vulnerability …1.8
• CVE-2026-82760Inefficient Algorithmic Complexity vulnerability in team-ale…8.2
• CVE-2026-82761Time-of-check Time-of-use (TOCTOU) Race Condition vulnerabil…9.1
• CVE-2026-82762Improper neutralization of special elements used in an OS co…8.8
• CVE-2026-82763Cross-site scripting vulnerability exists in Contec FX5000 s…5.4
• CVE-2026-82764Cross-site request forgery vulnerability exists in multiple …5.1
• CVE-2026-82765Path traversal vulnerability exists in Contec FX5000 series,…8.1