PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-76880 Wireshark Foundation CVE debrief

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-19T23:16:18.830Z and has not been modified since then. The NVD entry is currently Analyzed. This vulnerability, CVE-2026-76880, is caused by a RRC protocol dissector crash in Wireshark versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18. The vulnerability allows for denial of service attacks and has a HIGH CVSS score of 7.5, indicating a high level of severity. Network administrators and security teams should verify Wireshark installations and apply necessary patches or updates to mitigate potential risks. Additional verification is recommended to ensure accurate scope and impact assessment, including reviewing compensating controls and incident response plans. The vulnerability affects Wireshark installations, and users should confirm whether affected product deployments exist in managed environments.

Vendor
Wireshark Foundation
Product
Wireshark
CVSS
HIGH 7.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-08-19
Original CVE updated
2026-09-01
Advisory published
2026-08-19
Advisory updated
2026-09-01

Who should care

Network administrators, security teams, and Wireshark users should be aware of this vulnerability and take necessary actions to mitigate potential risks. The vulnerability affects Wireshark installations, and users should verify their installations and apply necessary patches or updates. The vulnerability has a HIGH CVSS score of 7.5, indicating a high level of severity. Additional verification is recommended to ensure accurate scope and impact assessment.

Technical summary

The CVE-2026-76880 vulnerability is caused by a RRC protocol dissector crash in Wireshark versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18. This vulnerability allows for denial of service attacks and has a HIGH CVSS score of 7.5. The vulnerability affects Wireshark installations, and network administrators and security teams should take necessary actions to mitigate potential risks. The vulnerability is related to the RRC protocol dissector and can be exploited through specially crafted packets.

Defensive priority

High-priority defensive actions are recommended due to the HIGH CVSS score of 7.5 and potential for denial of service attacks.

Recommended defensive actions

  • Inventory and verify Wireshark installations to identify potential exposure.
  • Apply vendor patches or updates to affected versions.
  • Implement compensating controls, such as monitoring and exception tracking.
  • Review and update incident response plans to address potential denial of service attacks.

Evidence notes

The CVE-2026-76880 record indicates a RRC protocol dissector crash vulnerability in Wireshark versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18, allowing for denial of service attacks. Evidence is based on official CVE Program and NVD sources. The vulnerability has a HIGH CVSS score of 7.5. Network administrators and security teams should verify Wireshark installations and apply necessary patches or updates. The NVD entry is currently Analyzed. Additional verification is recommended to ensure accurate scope and impact assessment.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-76880 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-76880

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-76880 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-76880

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.