PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-76920 Wireshark Foundation CVE debrief

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-19T23:16:20.727Z and has not been modified since then. This CVE-2026-76920 vulnerability affects Wireshark versions 4.4.0 to 4.4.18 and 4.6.0 to 4.6.7, allowing a denial of service condition through a crash in the 3GPP phone log file parser. Network administrators and security teams should be aware of this potential vulnerability and take defensive actions to prevent potential denial of service attacks. They should review vendor patches and updates to ensure the vulnerability is addressed. Limited details are available on potential exploits or attacks, so defenders should verify Wireshark installations, review vendor patches, and monitor network traffic for potential denial of service attacks with evidence-based verification.

Vendor
Wireshark Foundation
Product
Wireshark
CVSS
MEDIUM 4.7
CISA KEV
Not listed in stored evidence
Original CVE published
2026-08-19
Original CVE updated
2026-08-31
Advisory published
2026-08-19
Advisory updated
2026-08-31

Who should care

Network administrators and security teams responsible for Wireshark installations, particularly in versions 4.4.0 to 4.4.18 and 4.6.0 to 4.6.7, should be aware of this potential vulnerability and take defensive actions to prevent potential denial of service attacks. They should also review vendor patches and updates to ensure the vulnerability is addressed.

Technical summary

A denial of service vulnerability exists in Wireshark versions 4.4.0 to 4.4.18 and 4.6.0 to 4.6.7 due to a crash in the 3GPP phone log file parser. This vulnerability could allow an attacker to cause a denial of service condition by providing a specially crafted phone log file.

Defensive priority

Medium-priority defensive actions recommended due to potential denial of service vulnerability in Wireshark 4.4.0 to 4.4.18 and 4.6.0 to 4.6.7 versions.

Recommended defensive actions

  • Inventory and verify Wireshark versions 4.4.0 to 4.4.18 and 4.6.0 to 4.6.7 for potential vulnerability
  • Apply vendor patches or updates if available
  • Monitor network traffic and system logs for potential denial of service attacks

Evidence notes

Evidence from official sources indicates a denial of service vulnerability in Wireshark versions 4.4.0 to 4.4.18 and 4.6.0 to 4.6.7. Limited details are available on potential exploits or attacks. Defenders should verify Wireshark installations, review vendor patches, and monitor network traffic for potential denial of service attacks.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-76920 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-76920

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-76920 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-76920

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.