CVE-2026-76886 – Wireshark

CVSS 8.1 IMPORTANT Zero Day – Immediate Deployment

“Malformed network traffic can crash Wireshark and disrupt packet analysis workflows.”

Wireshark fixes four High-severity protocol dissector vulnerabilities affecting versions 4.6.0 through 4.6.7 and 4.4.0 through 4.4.18. The flaws affect C12.22, RRC, and X.509IF packet processing and can cause Wireshark to crash when maliciously crafted traffic is parsed.

CVE-2026-76886 has a CVSS score of 8.1, High severity. CVE-2026-76879 has a CVSS score of 7.5, High severity. CVE-2026-76880 has a CVSS score of 7.5, High severity. CVE-2026-76928 has a CVSS score of 7.5, High severity. Public proof-of-concept material is available for CVE-2026-76886.

Key Details

Affected Product
Wireshark Wireshark
Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
CWE Classification
CWE-122
Patch this CVE on all your endpoints in under 5 minutes. First 200 endpoints are free forever, scale as needed.