EUVD-2026-120563

Ettercap through 0.8.4.1 contains a use-after-free vulnerability in funcpcre in src/ecfilter.c that reads the PCRE2 ovector after freeing match data. Network-adjacent attackers can send packets matching a loaded pcreregex substitution filter to corrupt memory and potentially execute code as root...

CVE-2026-125400

Ettercap through 0.8.4.1 contains a use-after-free vulnerability in funcpcre in src/ecfilter.c that reads the PCRE2 ovector after freeing match data. Network-adjacent attackers can send packets matching a loaded pcreregex substitution filter to corrupt memory and potentially execute code as root...

CVE-2026-125400: ettercap: Ettercap through 0.8.4.1 contains a use-after-free vulnerability in func_pcre() in src/ec_filter.c that reads the PCRE2…

Ettercap through 0.8.4.1 contains a use-after-free vulnerability in funcpcre in src/ecfilter.c that reads the PCRE2 ovector after freeing match data. Network-adjacent attackers can send packets matching a loaded pcreregex substitution filter to corrupt memory and potentially execute code as root...

CVE-2026-125400 Ettercap through 0.8.4.1 Use-After-Free via PCRE2 Filter Substitution

Ettercap through 0.8.4.1 contains a use-after-free vulnerability in funcpcre in src/ecfilter.c that reads the PCRE2 ovector after freeing match data. Network-adjacent attackers can send packets matching a loaded pcreregex substitution filter to corrupt memory and potentially execute code as root...

CVE-2026-125400

Ettercap versions through 0.8.4.1 are susceptible to a use-after-free vulnerability within the func_pcre() function in src/ec_filter.c. The issue occurs because the software reads the PCRE2 ovector after the associated match data has been freed. A network-adjacent attacker can exploit this by sen...