{"answers":{"affected":"","exploited":"There is no known exploitation of CVE-2026-14461 in the wild and no public exploit code.","fix":"Apply the vendor's patch.","what":"CVE-2026-14461 is a medium-severity memory corruption vulnerability in BitWizard mtr, published on 10 Jul 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link."},"fix_prompt":"Check this codebase for CVE-2026-14461 and fix it if it is affected.\n\nWhat it is: CVE-2026-14461 is a medium-severity memory corruption vulnerability in BitWizard mtr, published on 10 Jul 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.\nExploitation: There is no known exploitation of CVE-2026-14461 in the wild and no public exploit code.\n\nAffected product: BitWizard mtr. No package-level version data is available, so check the vendor advisory linked from the reference page.\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2026-14461/ (Markdown: https://insights.sbomify.com/CVE-2026-14461/index.md)","id":"CVE-2026-14461","markdown":"https://insights.sbomify.com/CVE-2026-14461/index.md","name":"CVE-2026-14461","record":{"aliases":["AZL-92198","DEBIAN-CVE-2026-14461","GHSA-58vq-325m-3wrj","OESA-2026-3158","UBUNTU-CVE-2026-14461"],"analysis":{"component_type":"desktop_application","fix_type":"patch","impacts":["denial_of_service"],"network_reachable":"yes","non_default_config":false,"product_category":"network diagnostic tool","requires_auth":"none","summary":"An attacker can cause a reliable crash in mtr by sending a crafted DNS response with a large size and compression pointer.","user_interaction":"required","vuln_class":"memory_corruption"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"CERT-PL","cpe":[],"cvss":{"score":5.1,"severity":"medium","source":"cna","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","version":"4.0"},"cwes":[{"id":"CWE-125","name":"Out-of-bounds Read"}],"description":"mtr is vulnerable to Out-of-bound read vulnerability in ipinfo_lookup() function. An attacker who can influence the TXT response used for AS lookups can trigger this bug by returning a DNS response that is larger than 512 bytes and uses a crafted compression pointer in the answer NAME field. ipinfo_lookup() function uses the length of the response as the end-of-message boundary for dn_expand() function. The result is a reliable crash.\n\nThis issue exists in the mtr through version 0.96 and it was fixed in commit 48e1794414d338ce47abc0f27c25ade8788af9c3.","ecosystems":[],"exploits":{"exploitdb":0,"first_seen":"2026-10-03","github_poc":1,"max_poc_stars":0,"metasploit":0,"nuclei":0,"refs":[{"date":"2026-10-03T12:25:24Z","kind":"github_poc","ref":"https://github.com/sifatnotes/Learn-SecByte-CTF-Labs-Beelzebub-SQLMap-Auth-CVE-2026-14461-Web-to-Root","stars":0,"title":"Hands-on Learn SecByte CTF labs covering Beelzebub preparation, VM and network clues, Base64, CVE-2026-14461, admin panels, authentication, credential leaks, kernel security, reused keys, SQLMap, and web-to-root concepts."}],"tier":"poc_unverified"},"has_fix":true,"headline":"Out-of-bound read in mtr","id":"CVE-2026-14461","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":null,"product":null,"products":[],"type":"memory_corruption","year":"2026"},"n_packages":0,"n_references":2,"next":{"headline":"Session Fixation in Bilin Software's HUMANIST Digital Human Resources","id":"CVE-2026-14465"},"packages":[],"prev":{"headline":"Missing Authorization in TUBITAK BILGEM's pardus-software","id":"CVE-2026-14460"},"products":["mtr"],"published":"2026-07-10","related":[],"sources":[{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"},{"class":"attribution","licence":"CWE Terms of Use","name":"CWE (MITRE)"},{"class":"attribution","licence":"FIRST CVSS licence","name":"CVSS (FIRST)"},{"class":"open","licence":"CC0","name":"PoC-in-GitHub"}],"ssvc":{"automatable":"no","exploitation":"none","technical_impact":"partial"},"state":"PUBLISHED","updated":"2026-07-10","vendors":["BitWizard"]},"summary":"An attacker can cause a reliable crash in mtr by sending a crafted DNS response with a large size and compression pointer.","url":"https://insights.sbomify.com/CVE-2026-14461/"}