DEBIAN-CVE-2026-76879

C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-8619

The HTTP service in TP-Link TL-MR100 v3.2, TL-MR150 v3.2, TL-MR6400 v8.0, and Archer MR600 v2 crashes via NULL pointer dereference when an adjacent-network attacker sends a specially crafted HTTP request, temporarily disabling the web management interface. CVSS 4.0 base score is 7.1 (HIGH). TP-Li...

CVE-2026-8619 Unauthenticated Denial-of-Service Vulnerability in HTTP Service in TP-Link TL-MR100, TL-MR150, TL-MR6400 and Archer MR600

An unauthenticated denial-of-service vulnerability was identified in TP-Link TL-MR100 v3.2, TL-MR150 v3.2, TL-MR6400 v8.0 and Archer MR600 v2, due to improper handling of exceptional request conditions that may lead to a NULL pointer dereference. A remote attacker on an adjacent network can send ...

CVE-2026-76929

Wireshark's pcapng file parser contains an out-of-bounds read affecting versions 4.6.0–4.6.7 and 4.4.0–4.4.18, triggering a crash and denial of service when a crafted file is opened. Exploitation requires local access and user interaction; no in-the-wild exploitation is reported. Users should upg...

CVE-2026-76929 Out-of-bounds Read in Wireshark

Pcapng file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76928

Wireshark's X.509IF protocol dissector crashes via a NULL pointer dereference in versions 4.4.0–4.4.18 and 4.6.0–4.6.7. CVSS 7.5 HIGH; network-based DoS requiring no authentication. Affected users should upgrade to a patched release; see wnpa-sec-2026-87 for details.

CVE-2026-76928 NULL Pointer Dereference in Wireshark

X.509IF protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76927 NULL Pointer Dereference in Wireshark

H.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76927

Wireshark versions 4.6.0–4.6.7 and 4.4.0–4.4.18 contain a null pointer dereference in the H.245 protocol dissector, causing an application crash and denial of service (CVSS 4.7, MEDIUM) when a crafted packet is processed. No patch version or exploitation details are provided in the documents.

CVE-2026-76926

Wireshark (versions 4.6.0–4.6.7 and 4.4.0–4.4.18) contains a reachable assertion in the BUSMASTER file parser, causing abnormal exit and denial of service. The flaw is exploitable over the network with high complexity and requires user interaction (opening a crafted file). CVSS 3.1 scores it LOW ...

CVE-2026-76926 Reachable Assertion in Wireshark

BUSMASTER file parser abnormal exit in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76891

Wireshark's sharkd component (versions 4.6.0–4.6.7 and 4.4.0—4.4.18) crashes due to an expired pointer dereference, causing denial of service. CVSS 3.1 rates it LOW (3.1). References: wireshark.org/security/wnpa-sec-2026-64.html, gitlab.com/wireshark/wireshark/-/work_items/21395. Exploitation sta...

CVE-2026-76891 Expired Pointer Dereference in Wireshark

Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76890 Expired Pointer Dereference in Wireshark

Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76890

Wireshark's sharkd service crashes via expired pointer dereference in versions 4.6.0–4.6.7 and 4.4.0–4.4.18, enabling remote denial of service. CVSS 3.1 LOW (network attack, high complexity, no privileges). No exploitation details are provided; update to a patched version per the Wireshark securi...

CVE-2026-76885 Buffer Over-read in Wireshark

Tektronix K12xx file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76885

A buffer over-read in Wireshark's Tektronix K12xx file parser (CVE-2026-76885) affects versions 4.6.0–4.6.7 and 4.4.0–4.4.18, allowing denial of service when a crafted capture file is opened. The CVSS score is 3.1 (LOW) with high attack complexity and required user interaction. No exploitation in...

CVE-2026-76924 Out-of-bounds Read in Wireshark

Kerberos protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76924

Wireshark versions 4.4.0–4.4.18 and 4.6.0–4.6.7 contain an out-of-bounds read in the Kerberos protocol dissector that crashes the application when processing malformed Kerberos traffic, causing denial of service (CVSS 5.5 MEDIUM). No exploitation observed in the wild. Update to a patched version;...

CVE-2026-76923

An out-of-bounds read vulnerability exists in the Bluetooth HFP (Hands-Free Profile) protocol dissector of Wireshark , affecting versions 4.6.0–4.6.7 and 4.4.0–4.4.18 . A remote attacker can exploit this by tricking a user into opening a specially crafted capture file , causing Wireshark to crash...