CVE-2026-8276

CVE Enrichment

CVSS: 2.9 LOW
EPSS: 0.62%
EPSS Percentile: 48.97%
CISA KEV: Not listed

Description

A flaw has been found in bettercap up to 2.41.5. Affected by this issue is some unknown functionality of the file modules/mysql_server/mysql_server.go of the component MySQL Server. Executing a manipulation can lead to integer coercion error. The attack can be launched remotely. The attack requires a high level of complexity. The exploitation is known to be difficult. The exploit has been published and may be used. This patch is called 0eaa375c5e5446bfba94a290eff92967a5deac9e. It is advisable to implement a patch to correct this issue.

Technical Details

CVSS Version: 4.0
CNA / NVD Source: [email protected]
Published: 11-May-2026 13:16
Last Modified: 17-Jun-2026 18:03
EPSS Date: 2026-10-20
CWE: CWE-189, CWE-192

CVSS Vector


            CVSS:4.0                            AV:N /
                            AC:H /
                            AT:N /
                            PR:N /
                            UI:N /
                            VC:N /
                            VI:N /
                            VA:L /
                            SC:N /
                            SI:N /
                            SA:N /
                            E:P /
                            CR:X /
                            IR:X /
                            AR:X /
                            MAV:X /
                            MAC:X /
                            MAT:X /
                            MPR:X /
                            MUI:X /
                            MVC:X /
                            MVI:X /
                            MVA:X /
                            MSC:X /
                            MSI:X /
                            MSA:X /
                            S:X /
                            AU:X /
                            R:X /
                            V:X /
                            RE:X /
                            U:X

References

Last enrichment sync: 01-Nov-2026 20:37
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

bettercap stops installing its systemd service by default and fixes a remote denial of service in its mysql.server module triggered by a crafted client handshake, CVE-2026-8276. Debian 13.7 Bundles 92 Security Advisories and Updates 106 Packages

CVE (19)

Products (18)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.