Integer Coercion Flaw in Bettercap's MySQL Server Component
CVE-2026-8276

6.3MEDIUM

Key Information:

Vendor

Bettercap

Status
Bettercap
Vendor
CVE Published:
11 May 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-8276?

An integer coercion error has been identified in the MySQL Server component of Bettercap, affecting versions up to 2.41.5. This vulnerability can be exploited remotely, presenting a complex challenge for potential attackers. The flaw resides in the 'modules/mysql_server/mysql_server.go' file, which allows for harmful manipulation that can lead to security breaches. Given the intricacies involved in exploiting this vulnerability, it is crucial for users of Bettercap to apply the recommended patch identified in commit 0eaa375c5e5446bfba94a290eff92967a5deac9e to mitigate risks.

Affected Version(s)

bettercap 2.41.0

bettercap 2.41.1

bettercap 2.41.2

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-8276 - Proof of Concept

References

https://vuldb.com/vuln/362573
vdb-entry
https://vuldb.com/vuln/362573/cti
signaturepermissions-required
https://vuldb.com/submit/811163
third-party-advisory

CVSS V4

Score:
6.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

dapickle (VulDB User)
.