CVE-2026-76891
published 2026-08-19CVE-2026-76891: Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
PriorityP425medium6.5CVSS 3.1
AVNACLPRNUIRSUCNINAH
EPSS
0.21%
11.3th percentile
Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| gitlab | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | >= 4.4.0 < 4.4.18 | 4.4.18 |
| wireshark | wireshark | >= 4.6.0 < 4.6.8 | 4.6.8 |
| wireshark_foundation | wireshark | >= 4.4.0 < 4.4.18 | 4.4.18 |
| wireshark_foundation | wireshark | >= 4.6.0 < 4.6.8 | 4.6.8 |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
vendor_redhat3.1LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
wireshark: Wireshark: Denial of Service via sharkd crash
vendor_redhat·2026-08-19·CVSS 3.1
CVE-2026-76891 [LOW] CWE-248 wireshark: Wireshark: Denial of Service via sharkd crash
wireshark: Wireshark: Denial of Service via sharkd crash
A flaw was found in the sharkd component of Wireshark. A remote attacker could exploit this vulnerability, which requires user interaction and has high attack complexity, by triggering a crash. This issue leads to a denial of service (DoS), making the sharkd component unavailable.
Statement: Red Hat Enterprise Linux 6 through 9 ship Wireshark versions 1.x through 3.x, which predate the introduction of the vulnerable sharkd code in version 4.4.0 and are therefore not affected by this flaw. Red Hat Enterprise Linux 10 and Red Hat In-Vehicle OS ship Wireshark 4.4.2, which is within the affected range (4.4.0–4.4.17).
Mitigation: Avoid using sharkd to process untrusted capture files or to analyze traffic from untrusted network segments
GitLab
Expired Pointer Dereference in Wireshark
vendor_gitlab·2026-08-19·CVSS 3.1
CVE-2026-76891 [LOW] CWE-825 Expired Pointer Dereference in Wireshark
Expired Pointer Dereference in Wireshark
Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Affected products: Wireshark
Affected versions: >=4.6.0, =4.4.0, <4.4.18 (affected)
Solution: Upgrade to version 4.6.8 or above
Credit: Claude and Ada Logics
VulDB
Wireshark up to 4.4.17/4.6.7 sharkd denial of service
vuldb·2026-08-20·CVSS 3.1
CVE-2026-76891 [LOW] Wireshark up to 4.4.17/4.6.7 sharkd denial of service
A vulnerability was found in Wireshark up to 4.4.17/4.6.7. It has been declared as problematic. Impacted is an unknown function of the component sharkd. Executing a manipulation can lead to denial of service.
The identification of this vulnerability is CVE-2026-76891. The attack may be launched remotely. There is no exploit available.
It is recommended to upgrade the affected component.
GHSA
Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
ghsa_unreviewed·2026-08-20
CVE-2026-76891 [LOW] CWE-825 Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-76891 wireshark: Wireshark: Denial of Service via sharkd crash [fedora-all]
bugzilla·2026-08-20·CVSS 3.1
CVE-2026-76891 [LOW] CVE-2026-76891 wireshark: Wireshark: Denial of Service via sharkd crash [fedora-all]
CVE-2026-76891 wireshark: Wireshark: Denial of Service via sharkd crash [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Bugzilla
CVE-2026-76891 wireshark: Wireshark: Denial of Service via sharkd crash
bugzilla·2026-08-19·CVSS 3.1
CVE-2026-76891 [LOW] CVE-2026-76891 wireshark: Wireshark: Denial of Service via sharkd crash
CVE-2026-76891 wireshark: Wireshark: Denial of Service via sharkd crash
Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
2026-08-19
Published