CVE-2026-76929 Wireshark Foundation CVE debrief

Who should care

Network administrators, security teams, and users of Wireshark versions 4.4.0 to 4.4.18 and 4.6.0 to 4.6.7 should verify their systems and apply patches or updates to mitigate the vulnerability. Additionally, security teams should review and update inventory to ensure accurate tracking of affected systems and monitor for potential exploitation attempts.

Technical summary

The pcapng file parser crash vulnerability in Wireshark versions 4.4.0 to 4.4.18 and 4.6.0 to 4.6.7 allows for denial of service via a crafted pcapng file. The vulnerability is tracked as CVE-2026-76929 and has a CVSS score of 4.7. Affected systems may experience crashes or instability when processing malicious pcapng files.

Defensive priority

Medium-priority defensive actions recommended due to potential denial of service via pcapng file parser crash in Wireshark versions 4.4.0 to 4.4.18 and 4.6.0 to 4.6.7.

Recommended defensive actions

• Verify Wireshark version and check for vendor-provided patches or updates.
• Implement compensating controls, such as monitoring and exception tracking, to detect potential exploitation attempts.
• Review and update inventory to ensure accurate tracking of affected systems.

Evidence notes

Evidence from official sources indicates a pcapng file parser crash vulnerability in Wireshark versions 4.4.0 to 4.4.18 and 4.6.0 to 4.6.7, allowing for denial of service. The CVE Program and NVD provide official records and assessments. Defenders should verify Wireshark version, review vendor advisories, and monitor for potential exploitation attempts.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.