CVE-2026-76928

Wireshark's X.509IF protocol dissector crashes via a NULL pointer dereference in versions 4.4.0–4.4.18 and 4.6.0–4.6.7. CVSS 7.5 HIGH; network-based DoS requiring no authentication. Affected users should upgrade to a patched release; see wnpa-sec-2026-87 for details.