wnpa-sec-2026-63 · Ciscodump extcap crash
Summary
Name: Ciscodump extcap crash
Docid: wnpa-sec-2026-63
Date: July 8, 2026
Affected versions: 4.6.0 to 4.6.6, 4.4.0 to 4.4.16
Fixed versions: 4.6.7, 4.4.17
References:
Wireshark issue 21375.
CVE-2026-15164.
Details
Description
The ciscodump external capture interface could crash.
Impact
Discovered by 0sec and Doruk Tan Ozturk. It may be possible to make the ciscodump extcap crash by convincing someone to connect to a hostile device.
Resolution
Upgrade to Wireshark 4.6.7, 4.4.17 or later.