Denial of Service Vulnerability in Wireshark SSH Protocol Dissector
CVE-2026-76918

5.5MEDIUM

Key Information:

Vendor

Wireshark
Status
Wireshark
Vendor
CVE Published:
19 August 2026

What is CVE-2026-76918?

A vulnerability in Wireshark's SSH protocol dissector affects versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18, allowing an attacker to crash the dissector. This can lead to denial of service, as the affected versions may become unresponsive when processing specific packets. Users are advised to review the provided references for patch details and mitigation strategies.

Affected Version(s)

Wireshark 4.6.0 < 4.6.8

Wireshark 4.4.0 < 4.4.18

References

https://www.wireshark.org/security/wnpa-sec-2026-85.html
https://gitlab.com/wireshark/wireshark/-/work_items/21465

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

BreachX Zero Day Labs
.