wnpa-sec-2026-106 · Profile import crash and possible code execution
Summary
Name: Profile import crash and possible code execution
Docid: wnpa-sec-2026-106
Date: September 23, 2026
Affected versions: 4.6.0 to 4.6.8, 4.4.0 to 4.4.18
Fixed versions: 4.6.9, 4.4.19
References:
Wireshark issue 21553.
CVE-2026-96419.
Details
Description
Importing a crafted configuration profile could crash Wireshark or execute arbitrary code.
Impact
Discovered by 경배 지. We are unaware of any exploits for this issue. It may be possible to make Wireshark crash or execute arbitrary code by convincing someone to import a malformed configuration profile.
Resolution
Upgrade to Wireshark 4.6.9, 4.4.19 or later.
