A critical vulnerability, CVE-2026-96419 with a CVSS score of 8.5, exists in Wireshark's configuration-profile handling component that can crash the application or execute arbitrary code when a user imports a specially crafted profile. This flaw is exploitable via phishing or other social engineering tactics and allows an attacker to deliver a malicious profile that appears legitimate. The vulnerability affects versions 4.6.0 through 4.6.8 and the 4.4 branch from 4.4.0 through 4.4.18, with fixes included in 4.6.9 and 4.4.19. Wireshark's advisory states that it is unaware of active exploitation; however, the required user interaction does not eliminate the danger, as a malicious profile could be delivered through various means and presented as legitimate troubleshooting configuration. The vulnerability poses a significant risk to analysts who routinely open traffic captures and files collected from untrusted environments, potentially creating a direct workstation risk.
We recommend you to update Wireshark to version 4.6.9.[/subscribe_to_unlock_form]
A critical vulnerability, CVE-2026-96419 with a CVSS score of 8.5, exists in Wireshark's configuration-profile handling component that can crash the application or execute arbitrary code when a user imports a specially crafted profile. This flaw is exploitable via phishing or other social engineering tactics and allows an attacker to deliver a malicious profile that appears legitimate. The vulnerability affects versions 4.6.0 through 4.6.8 and the 4.4 branch from 4.4.0 through 4.4.18, with fixes included in 4.6.9 and 4.4.19. Wireshark's advisory states that it is unaware of active exploitation; however, the required user interaction does not eliminate the danger, as a malicious profile could be delivered through various means and presented as legitimate troubleshooting configuration. The vulnerability poses a significant risk to analysts who routinely open traffic captures and files collected from untrusted environments, potentially creating a direct workstation risk.
We recommend you to update Wireshark to version 4.6.9.[emaillocker id="1283"]
The following reports contain further technical details:
[/emaillocker]