CVE-2026-9365

A vulnerability has been found in Ettercap up to 0.8.3. The affected element is the function FUNC_DECODER of the file src/dissectors/ec_gg.c of the component GG Dissector. The manipulation of the argument gg leads to heap-based buffer overflow. The attack is possible to be carried out remotely. The complexity of an attack is rather high. The exploitability is described as difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 0.8.4 is sufficient to fix this issue. The identifier of the patch is feeae6fa366e01a3dd9f1857ec6aae847b2ae00c. It is suggested to upgrade the affected component.

• CWE-119
• CWE-122

• https://github.com/Ettercap/ettercap/
• https://github.com/Ettercap/ettercap/commit/feeae6fa366e01a3dd9f1857ec6aae847b2ae00c
• https://github.com/Ettercap/ettercap/issues/1306
• https://github.com/Ettercap/ettercap/pull/1307
• https://vuldb.com/submit/813142
• https://vuldb.com/vuln/365328
• https://vuldb.com/vuln/365328/cti

Published

May 24, 2026

Last Modified

Jul 23, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-9363A vulnerability was detected in Edimax EW-7438RPn 1.12. This…6.3
• CVE-2026-9364A flaw has been found in projectworlds Online Art Gallery Sh…7.3
• CVE-2026-93641An unauthenticated sender can forge a share notification tha…9.3
• CVE-2026-93642An unauthenticated sender can forge a share notification tha…9.3
• CVE-2026-93643When OnlyOffice/Document Editing is available, an unauthenti…9.8
• CVE-2026-93647An unauthenticated calendar sender can place active markup i…9.3
• CVE-2026-93650A vulnerability was determined in Saleor up to 3.20.118/3.21…3.7
• CVE-2026-93652Integer overflow in µD3TN v0.15.0 TCPCLv3 handshake causes h…7.5
• CVE-2026-93653A denial of service flaw was found in Poppler's Splash backe…5.5
• CVE-2026-93654The Premium Packages – Sell Digital Products Securely plugin…7.2
• CVE-2026-93655The Booking Calendar plugin for WordPress is vulnerable to R…6.1
• CVE-2026-93656The User Profile Builder – Beautiful User Registration Forms…6.4