PatchSiren cyber security CVE debrief
CVE-2026-76920 Wireshark Foundation CVE debrief
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-19T23:16:20.727Z and has not been modified since then. This CVE-2026-76920 vulnerability affects Wireshark versions 4.4.0 to 4.4.18 and 4.6.0 to 4.6.7, allowing a denial of service condition through a crash in the 3GPP phone log file parser. Network administrators and security teams should be aware of this potential vulnerability and take defensive actions to prevent potential denial of service attacks. They should review vendor patches and updates to ensure the vulnerability is addressed. Limited details are available on potential exploits or attacks, so defenders should verify Wireshark installations, review vendor patches, and monitor network traffic for potential denial of service attacks with evidence-based verification.
- Vendor
- Wireshark Foundation
- Product
- Wireshark
- CVSS
- MEDIUM 4.7
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-08-19
- Original CVE updated
- 2026-08-31
- Advisory published
- 2026-08-19
- Advisory updated
- 2026-08-31
Who should care
Network administrators and security teams responsible for Wireshark installations, particularly in versions 4.4.0 to 4.4.18 and 4.6.0 to 4.6.7, should be aware of this potential vulnerability and take defensive actions to prevent potential denial of service attacks. They should also review vendor patches and updates to ensure the vulnerability is addressed.
Technical summary
A denial of service vulnerability exists in Wireshark versions 4.4.0 to 4.4.18 and 4.6.0 to 4.6.7 due to a crash in the 3GPP phone log file parser. This vulnerability could allow an attacker to cause a denial of service condition by providing a specially crafted phone log file.
Defensive priority
Medium-priority defensive actions recommended due to potential denial of service vulnerability in Wireshark 4.4.0 to 4.4.18 and 4.6.0 to 4.6.7 versions.
Recommended defensive actions
- Inventory and verify Wireshark versions 4.4.0 to 4.4.18 and 4.6.0 to 4.6.7 for potential vulnerability
- Apply vendor patches or updates if available
- Monitor network traffic and system logs for potential denial of service attacks
Evidence notes
Evidence from official sources indicates a denial of service vulnerability in Wireshark versions 4.4.0 to 4.4.18 and 4.6.0 to 4.6.7. Limited details are available on potential exploits or attacks. Defenders should verify Wireshark installations, review vendor patches, and monitor network traffic for potential denial of service attacks.
Sources and references
Verified primary and authoritative sources
-
CVE-2026-76920 CVE Program record
Publisher, destination, and source semantics verified
URL: https://www.cve.org/CVERecord?id=CVE-2026-76920
CVE Program - Official CVE Program record with source-provided CVE metadata.
-
CVE-2026-76920 NVD vulnerability detail
Publisher, destination, and source semantics verified
URL: https://nvd.nist.gov/vuln/detail/CVE-2026-76920
NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.
Supplemental references
-
Source reference
Unverified legacy reference
URL: https://gitlab.com/wireshark/wireshark/-/work_items/21454
[email protected] - Exploit, Mitigation, Vendor Advisory
-
Source reference
Unverified legacy reference
URL: https://www.wireshark.org/security/wnpa-sec-2026-81.html
[email protected] - Vendor Advisory
Methodology and review provenance
AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.