Denial of Service Vulnerability in Wireshark by the Vendor The Wireshark Foundation
CVE-2026-76919

5.3MEDIUM

Key Information:

Vendor

Wireshark
Status
Wireshark
Vendor
CVE Published:
19 August 2026

What is CVE-2026-76919?

A vulnerability in Wireshark's ESS protocol dissector impacts versions from 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18, enabling a potential Denial of Service attack. An attacker can exploit this flaw to cause the application to crash, disrupting network analysis and monitoring capabilities. It is essential for users of these versions to upgrade to the latest release to mitigate this risk and ensure continuous protection of their systems.

Affected Version(s)

Wireshark 4.6.0 < 4.6.8

Wireshark 4.4.0 < 4.4.18

References

https://www.wireshark.org/security/wnpa-sec-2026-86.html
https://gitlab.com/wireshark/wireshark/-/work_items/21467

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Aisle Research (Dmitrijs Trizna, Luigino Camastra, Ze Sheng (O2Lab & TAMU), Igor Morgenstern)
.