Loading vulnerability…
IEEE 802.11 Dissector Denial of Service in Wireshark
CVE-2026-96416 is a crash vulnerability in the IEEE 802.11 protocol dissector in Wireshark versions 4.6.0 through 4.6.8 and 4.4.0 through 4.4.18. An attacker can trigger a dissector crash, causing denial of service. The underlying implementation defect and precise triggering input are not specified.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation can crash the IEEE 802.11 protocol dissector and disrupt the affected Wireshark process. Arbitrary code execution is mentioned in advisories covering multiple Wireshark vulnerabilities, but it is not specifically established for CVE-2026-96416.
If you can’t patch tonight, do this now.
Until updates are deployed, limit opening or processing untrusted packet captures and network traffic with affected Wireshark installations, and apply appropriate network and endpoint access controls. No vulnerability-specific workaround is identified.
Patch, then assume compromise.
Upgrade Wireshark 4.4.x to version 4.4.19 or later, or Wireshark 4.6.x to version 4.6.9 or later. For Debian 13 (trixie), upgrade the affected Wireshark packages to version 4.4.19-0+deb13u1 or later. Although one entry labels the vulnerability unpatched, the supplied advisories identify these fixed versions.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
5 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.