Denial of Service Vulnerability in Wireshark by The Wireshark Foundation
CVE-2026-76881

4.7MEDIUM

Key Information:

Vendor

Wireshark
Status
Wireshark
Vendor
CVE Published:
19 August 2026

What is CVE-2026-76881?

A vulnerability in specific versions of Wireshark allows for a denial of service due to a crash in the CMS protocol dissector. Attackers can exploit this issue by crafting malicious packets that lead to a system crash, adversely impacting network monitoring and analysis tasks. Users of affected versions are encouraged to update to the latest release to mitigate this risk, ensuring continued functionality and security.

Affected Version(s)

Wireshark 4.6.0 < 4.6.8

Wireshark 4.4.0 < 4.4.18

References

https://www.wireshark.org/security/wnpa-sec-2026-76.html
https://gitlab.com/wireshark/wireshark/-/work_items/21446

CVSS V3.1

Score:
4.7
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Aisle Research (Dmitrijs Trizna, Luigino Camastra, Ze Sheng (O2Lab & TAMU), Igor Morgenstern)
.