CVE-2026-76928

Analyzed Analyzed - Analysis Complete

X.509IF Protocol Dissector DoS in Wireshark

Publication date: 2026-08-19

Last updated on: 2026-08-31

Assigner: GitLab Inc.

Description

X.509IF protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-19

Last Modified

2026-08-31

Generated

2026-09-09

AI Q&A

2026-08-20

EPSS Evaluated

2026-09-07

NVD

CVE-2026-76928

EUVD

EUVD-2026-63166

Affected Vendors & Products

Vendor	Product	Version / Range
wireshark	wireshark	From 4.6.0 (inc) to 4.6.8 (exc)
wireshark	wireshark	From 4.4.0 (inc) to 4.4.18 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-476	The product dereferences a pointer that it expects to be valid but is NULL.

Attack-Flow Graph

Executive Summary

This vulnerability is a denial of service issue in the X.509IF protocol dissector affecting Wireshark versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18. It causes the application to crash when processing certain network traffic, leading to service disruption.

Detection Guidance

This vulnerability affects Wireshark versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 due to an X.509IF protocol dissector crash. To detect it, check your Wireshark version with 'wireshark --version'. If it falls within the affected range, update immediately. Monitor for crashes when processing X.509IF packets.

Impact Analysis

If exploited, this vulnerability could allow an attacker to remotely crash Wireshark, disrupting network analysis and monitoring activities. Users analyzing network traffic with vulnerable versions may experience unexpected application failures.

Compliance Impact

This vulnerability causes a denial of service via X.509IF protocol dissector crash, which could disrupt services handling sensitive data. For GDPR, this may impact availability of personal data processing systems. For HIPAA, it could affect the integrity and availability of protected health information systems. However, specific compliance impacts depend on system configuration and compensating controls.

Mitigation Strategies

Update Wireshark to a version outside the affected range (4.6.0 to 4.6.7 or 4.4.0 to 4.4.18) to prevent the X.509IF protocol dissector crash that causes denial of service.

Hi! I’m here to help you understand CVE-2026-76928. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70