{"affected":[{"defaultStatus":"unaffected","product":"Wireshark","source":"CNA: GitLab","vendor":"Wireshark Foundation","versions":[{"lessThan":"4.6.9","status":"affected","version":"4.6.0","versionType":"semver"},{"lessThan":"4.4.19","status":"affected","version":"4.4.0","versionType":"semver"}]}],"cpeConfigurations":[{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*","versionEndExcluding":"4.4.19","versionStartIncluding":"4.4.0","vulnerable":true},{"criteria":"cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*","versionEndExcluding":"4.6.9","versionStartIncluding":"4.6.0","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"}],"cveId":"CVE-2026-96423","cwes":["CWE-122","CWE-125"],"description":"X11 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service","epss":{"date":"2026-11-03","percentile":0.03476,"score":0.00141},"exploits":[{"kind":"exploit","source":"ADP: CISA-ADP","url":"https://gitlab.com/wireshark/wireshark/-/work_items/21563"},{"kind":"exploit","source":"cve@gitlab.com","url":"https://gitlab.com/wireshark/wireshark/-/work_items/21563"},{"kind":"exploit","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","url":"https://gitlab.com/wireshark/wireshark/-/work_items/21563"}],"kev":null,"metrics":[{"score":5.5,"severity":"medium","source":"CNA: GitLab","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","version":"3.1"},{"score":7.1,"severity":"high","source":"NVD: nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","version":"3.1"},{"score":5.5,"severity":"medium","source":"NVD: cve@gitlab.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","version":"3.1"}],"modifiedAt":1793747880563,"publishedAt":1790674238019,"references":[{"source":"CNA: GitLab","tags":[],"url":"https://www.wireshark.org/security/wnpa-sec-2026-108.html"},{"source":"CNA: GitLab","tags":[],"url":"https://gitlab.com/wireshark/wireshark/-/work_items/21563"},{"source":"ADP: CISA-ADP","tags":["exploit"],"url":"https://gitlab.com/wireshark/wireshark/-/work_items/21563"},{"source":"cve@gitlab.com","tags":["Exploit","Vendor Advisory"],"url":"https://gitlab.com/wireshark/wireshark/-/work_items/21563"},{"source":"cve@gitlab.com","tags":["Vendor Advisory"],"url":"https://www.wireshark.org/security/wnpa-sec-2026-108.html"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["Exploit","Vendor Advisory"],"url":"https://gitlab.com/wireshark/wireshark/-/work_items/21563"}],"remediation":[{"kind":"fix","source":"CNA: GitLab","text":"Upgrade to version 4.6.9 or above"}],"revision":"9b54dbfe268885778f9767b4df09f0c8cf206d18be5a330f916e91517a82f114","sources":[{"modifiedAt":1793744618994,"name":"CNA: GitLab","retrievedAt":1793748398205,"url":"https://www.cve.org/CVERecord?id=CVE-2026-96423"},{"modifiedAt":1793747880563,"name":"NVD","retrievedAt":1793751444763,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96423"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793748400162,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-96423"}],"ssvc":{"assessedAt":1791950263488,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"Heap-based Buffer Overflow in Wireshark","updatedAt":1793751444763}