CVE-2026-8276 bettercap MySQL Server mysql_server.go integer coercion
Remote attackers can trigger integer coercion errors in bettercap's MySQL server module, potentially causing unexpected behavior or crashes.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-8276?
CVE-2026-8276 is a medium-severity vulnerability in bettercap, published on 11 May 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A flaw has been found in bettercap up to 2.41.5. Affected by this issue is some unknown functionality of the file modules/mysql_server/mysql_server.go of the component MySQL Server. Executing a manipulation can lead to integer coercion error. The attack can be launched remotely. The attack requires a high level of complexity. The exploitation is known to be difficult. The exploit has been published and may be used. This patch is called 0eaa375c5e5446bfba94a290eff92967a5deac9e. It is advisable to implement a patch to correct this issue.
Which versions are affected by CVE-2026-8276?
3 open source packages ship an affected version, including github.com/bettercap/bettercap/v2.
| Package | Affected | Fixed in |
|---|---|---|
github.com/bettercap/bettercap/v2 Go | All versions | 2.41.7 |
github.com/bettercap/bettercap/v2 Go | All versions | 2.41.7 |
github.com/bettercap/bettercap/v2 Go | All versions | 2.41.7 |
How do I fix CVE-2026-8276?
Upgrade github.com/bettercap/bettercap/v2 to 2.41.7 or later.
Is CVE-2026-8276 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-8276 exists.
Sources
Also known as DEBIAN-CVE-2026-8276, GHSA-jcqv-2g3v-gm88, GO-2026-5463, UBUNTU-CVE-2026-8276.