Out-of-Bound Read Vulnerability in MTR Product by Travis Cross
CVE-2026-14461

5.1MEDIUM

Key Information:

Vendor

Bitwizard

Status
Mtr
Vendor
CVE Published:
10 July 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-14461?

The mtr tool is affected by an Out-of-Bound read vulnerability in the ipinfo_lookup() function, which can be exploited if an attacker manipulates the TXT response used during AS lookups. By delivering a DNS response larger than 512 bytes and incorporating a crafted compression pointer in the answer NAME field, an attacker can cause mtr to use an incorrect message boundary in the dn_expand() function, leading to a reliable crash. This issue is present in mtr versions prior to 0.96 and has been remediated in subsequent updates.

Affected Version(s)

mtr 0 <= 0.96

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

Learn-SecByte-CTF-Labs-Beelzebub-SQLMap-Auth-CVE-2026-14461-Web-to-Root
Created by sifatnotes

References

https://cert.pl/en/posts/2026/07/CVE-2026-14461
third-party-advisory
https://github.com/traviscross/mtr/commit/48e1794414d338c...
patch

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Michał Majchrowicz (AFINE Team)
Marcin Wyczechowski (AFINE Team)
.