Log in Start free

Vulnerability · Published May 11, 2026 · Assigned by VulDB

CVE-2026-8275bettercap zerogod IPP Service zerogod_ipp_primitives.go ippReadChunkedBody integer coercion

Low 3.7

In plain English

A low-severity security flaw in bettercap. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 45% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)3.7Low
Exploit odds (30 days)0.5%top 55.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

A vulnerability was detected in bettercap up to 2.41.5. Affected by this vulnerability is the function ippReadChunkedBody of the file modules/zerogod/zerogod_ipp_primitives.go of the component zerogod IPP Service. Performing a manipulation results in integer coercion error. The attack can be initiated remotely. The attack is considered to have high complexity. The exploitation appears to be difficult. The exploit is now public and may be used. The patch is named 3731d5576cffae9eefe3721cd46a40933304129f. To fix this issue, it is recommended to deploy a patch.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12bettercapno fix listedDEBIAN-CVE-2026-8275
Debian:13bettercapno fix listedDEBIAN-CVE-2026-8275
Debian:14bettercapno fix listedDEBIAN-CVE-2026-8275
Gogithub.com/bettercap/bettercapno fix listedGO-2026-5003
Gogithub.com/bettercap/bettercap/v22.41.7GO-2026-5003
Gogithub.com/bettercap/bettercap/v22.41.7GHSA-322p-rrj6-j44g
Ubuntu:25.10bettercapno fix listedUBUNTU-CVE-2026-8275
Ubuntu:26.04:LTSbettercapno fix listedUBUNTU-CVE-2026-8275
Ubuntu:26.10bettercapno fix listedUBUNTU-CVE-2026-8275

Affected products (as reported)

VendorProductVersions
n/a bettercap 2.41.02.41.12.41.22.41.32.41.42.41.5

Weakness: CWE-192, CWE-189 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C

References