CVE-2026-13589 | seladb PcapPlusPlus 25.05 Telnet Subnegotiation Packet TelnetLayer.cpp getSubCommand heap-based overflow (Issue 2152)

A vulnerability was found in seladb PcapPlusPlus 25.05. It has been rated as critical. This affects the function pcpp::TelnetLayer::getSubCommand of the file Packet++/src/TelnetLayer.cpp of the component Telnet Subnegotiation Packet Handler. The manipulation leads to heap-based buffer overflow.

This vulnerability is documented as CVE-2026-13589. The attack can be initiated remotely. Additionally, an exploit exists.

It is recommended to apply a patch to fix this issue.