CVE-2026-76928CWE-476

CVE-2026-76928

High · published August 20, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
23.6
In the wild
Unconfirmed
What it is

X.509IF protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00318 · 23.6th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2026-08-20T03:16Z
Affected products (2)
ProductVersionsFixed in
wireshark/wireshark≥ 4.4.0, < 4.4.184.4.18
wireshark/wireshark≥ 4.6.0, < 4.6.84.6.8
References (2)
https://gitlab.com/wireshark/wireshark/-/work_items/21469 · [email protected]https://www.wireshark.org/security/wnpa-sec-2026-87.html · [email protected]
EPSS history
Timeline
  • 19 AUG 23:00Z
    NULL Pointer Dereference in Wireshark
    cvelistv5