CVE-2026-76928

A flaw in Wireshark's X.509IF protocol dissector allows a remote attacker to cause a Denial of Service (DoS). By providing a specially crafted capture file or network stream, an attacker can crash the application, making it unavailable.

A Moderate Denial of Service vulnerability in Wireshark's X.509IF dissector allows an attacker to crash the application using a crafted capture file or network stream. The impact is limited strictly to Wireshark's availability and does not affect the host system. RHEL 9 and older versions are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Avoid opening untrusted capture files or monitoring untrusted networks where malformed packets may be broadcast. If X.509IF protocol analysis is not required, disable the dissector. In Wireshark, navigate to Analyze > Enabled Protocols and uncheck X.509IF, or run tshark using the flag -d x509if,0 to bypass this dissector entirely.