CVE
CVE-2026-96421
- First Reported
- Oct 5, 2026
- Latest Reported
- Oct 5, 2026
CVE Enrichment
- CVSS
- 5.5 MEDIUM
- EPSS
- 0.13%
- EPSS Percentile
- 2.26%
- CISA KEV
- Not listed
Description
USB HID protocol dissector infinite loop and memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
Technical Details
- CVSS Version
- 3.1
- CNA / NVD Source
- cve@gitlab.com
- Published
- 29-Sep-2026 17:17
- Last Modified
- 06-Oct-2026 21:42
- EPSS Date
- 2026-10-11
- CWE
- CWE-1325
CVSS Vector
CVSS:3.1 AV:L /
AC:L /
PR:N /
UI:R /
S:U /
C:N /
I:N /
A:H
Affected Products / Versions
- wireshark / wireshark
Version / affected range: * · from (inclusive) 4.4.0 · before (exclusive) 4.4.19
cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:* - wireshark / wireshark
Version / affected range: * · from (inclusive) 4.6.0 · before (exclusive) 4.6.9
cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*
References
Last enrichment sync: 12-Oct-2026 03:09
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.
Reported Context (1)
- marked urgent first — CVE-2026-88779 (Citrix NetScaler ADC and NetScaler Gateway), CVE-2026-96419, CVE-2026-96421, CVE-2026-95391, CVE-2026-95389 (Wireshark), CVE-2026-86857, CVE-2026-86858, CVE-2026-13016, Weekly Security Recap: Exploited Citrix NetScaler Flaw and Dozens of Vulnerabilities
CVE (135)
Vendors (1)
Products (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.