Denial of Service Vulnerability in Wireshark RDP Protocol Dissector
CVE-2026-76888

3.1LOW

Key Information:

Vendor

Wireshark
Status
Wireshark
Vendor
CVE Published:
19 August 2026

What is CVE-2026-76888?

A vulnerability in the Remote Desktop Protocol (RDP) dissector of Wireshark allows an attacker to exploit specific versions of the software, leading to a crash. This exploit can cause a denial of service, disrupting the functionality of the network analysis tool. Users running affected versions from 4.6.0 to 4.6.7, as well as versions from 4.4.0 to 4.4.18, should take immediate action to mitigate this risk by updating to the latest version.

Affected Version(s)

Wireshark 4.6.0 < 4.6.8

Wireshark 4.4.0 < 4.4.18

References

https://www.wireshark.org/security/wnpa-sec-2026-67.html
https://gitlab.com/wireshark/wireshark/-/work_items/21396

CVSS V3.1

Score:
3.1
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Claude and Ada Logics
.