Denial of Service Vulnerability in Wireshark by Riverbed Technology
CVE-2026-96419

5.5MEDIUM

Key Information:

Vendor

Wireshark

Status
Vendor
CVE Published:
29 September 2026

What is CVE-2026-96419?

CVE-2026-96419 refers to a denial of service vulnerability found within Wireshark, a popular open-source network protocol analyzer used for network troubleshooting, analysis, and protocol development. Specifically, this vulnerability affects versions 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 of the software, and it arises from a crash that occurs during the import of profiles. Such a denial of service attack could prevent users from effectively utilizing the tool, disrupting network management and analysis capabilities. Additionally, there is a possibility of code execution associated with this flaw, which could lead to unauthorized manipulation of the software or the underlying system.

Potential impact of CVE-2026-96419

  1. Service Disruption: The primary impact of this vulnerability is the potential for denial of service, which would result in significant interruptions for network analysts and IT teams relying on Wireshark for their operations. It could hinder the identification and resolution of network issues, leading to prolonged downtimes.

  2. Security Risks: Given that the vulnerability allows for possible code execution, it could be exploited by malicious actors to execute harmful code within the context of the application. This might expose sensitive data or facilitate further attacks on the broader network.

  3. Operational Costs: Organizations may incur operational costs due to the need to mitigate the effects of such vulnerabilities, including potential recovery efforts, system repairs, and the implementation of additional security measures. Extended downtimes could also affect productivity and operational efficiency, leading to increased financial losses.

Affected Version(s)

Wireshark 4.6.0 < 4.6.9

Wireshark 4.4.0 < 4.4.19

References

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

경배 지
.