CVE-2026-76921
published 2026-08-19CVE-2026-76921: CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
PriorityP417medium5.5CVSS 3.1
AVLACLPRNUIRSUCNINAH
EPSS
0.15%
4.3th percentile
CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| gitlab | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | >= 4.4.0 < 4.4.18 | 4.4.18 |
| wireshark | wireshark | >= 4.6.0 < 4.6.8 | 4.6.8 |
| wireshark_foundation | wireshark | >= 4.4.0 < 4.4.18 | 4.4.18 |
| wireshark_foundation | wireshark | >= 4.6.0 < 4.6.8 | 4.6.8 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Wireshark up to 4.4.17/4.6.7 Dissector denial of service
vuldb·2026-08-20·CVSS 5.5
CVE-2026-76921 [MEDIUM] Wireshark up to 4.4.17/4.6.7 Dissector denial of service
A vulnerability was found in Wireshark up to 4.4.17/4.6.7 and classified as problematic. The affected element is an unknown function of the component Dissector. Executing a manipulation can lead to denial of service.
This vulnerability is handled as CVE-2026-76921. The attack can be executed remotely. There is not any exploit available.
It is suggested to upgrade the affected component.
GHSA
CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
ghsa_unreviewed·2026-08-20
CVE-2026-76921 [MEDIUM] CWE-416 CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Red Hat
Wireshark: Wireshark: Denial of Service via Use After Free in CMS protocol dissector
vendor_redhat·2026-08-19·CVSS 5.5
CVE-2026-76921 [MEDIUM] CWE-416 Wireshark: Wireshark: Denial of Service via Use After Free in CMS protocol dissector
Wireshark: Wireshark: Denial of Service via Use After Free in CMS protocol dissector
CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
A flaw was found in Wireshark. A use-after-free vulnerability exists in the CMS (Cryptographic Message Syntax) protocol dissector. An attacker could exploit this by crafting a malicious network packet, leading to a crash and a denial of service (DoS) for the application.
Statement: This vulnerability is rated Moderate because exploitation requires user interaction (opening a crafted capture file or inspecting malicious traffic) and results only in an application crash. Since Wireshark is an interactive diagnostic tool rather than a continuous privileged daemon, the impact is strictly confined to a local denial of
GitLab
Use After Free in Wireshark
vendor_gitlab·2026-08-19·CVSS 5.5
CVE-2026-76921 [MEDIUM] CWE-416 Use After Free in Wireshark
Use After Free in Wireshark
CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Affected products: Wireshark
Affected versions: >=4.6.0, =4.4.0, <4.4.18 (affected)
Solution: Upgrade to version 4.6.8 or above
Credit: Aisle Research (Dmitrijs Trizna, Luigino Camastra, Ze Sheng (O2Lab & TAMU), Igor Morgenstern)
No detection rules found.
No public exploits indexed.
2026-08-19
Published