TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service
CVE-2026-19694
This medium-severity CVE scores 5.5 under NVD CVSS v3. EPSS exploit probability: 0.1%, top 97% of all CVEs by exploit prediction. GitHub Security Advisory enrichment pending alignment with NVD CVSS.
- Lower severity and no public exploit yet
No vendor fix yet — apply a workaround or compensating control (WAF / firewall / segmentation) and watch for a patch.
- CVSS v3
- 5.5
- EG Score
- 5.5(medium)
- EG Risk
- 41(Track)EG Risk 41/100SSVC: Track
EG Risk is EchelonGraph's 0–100 priority score: it fuses intrinsic severity with real-world exploitation and automatability so you can rank equal-severity CVEs and fix the most dangerous first. Higher = act sooner. Distinct from the 0–10 EG Score (severity).
How it’s computedSeverity55% × 45%Exploitation40% × 40%Automatability0% × 15%Action: Routine — remediate on your standard cadence. - EPSS PROB
- 0%
- EPSS %ILE
- 3%
- KEV
- Not listed
Published
August 13, 2026
Last Modified
September 1, 2026
Advisory Details (2)
Auto-updated Aug 13, 2026TTL (TTX Logger) capture reader: out-of-bounds heap write via missing minimum-size check on reassembled segment (#21389) · Issues · Wireshark Foundation / Wireshark · GitLab
https://gitlab.com/wireshark/wireshark/-/work_items/21389Wireshark • Go Deep | Wireshark • wnpa-sec-2026-68 TTX Logger file parser crash
https://www.wireshark.org/security/wnpa-sec-2026-68.htmlVendor Advisories for CVE-2026-19694(1)
These vendors published their own advisory mentioning this CVE — often with vendor-specific remediation steps + affected product lists not in NVD.
Affected Packages
(1 across 1 ecosystem)
Debian:14(1)
| Package | Vulnerable range | Fixed in | Dependents |
|---|---|---|---|
| wireshark | 4.4.7-1 ... 4.6.6-2 (16 versions) | — | — |
Weakness Classification(1)
MITRE Common Weakness Enumeration — the root-cause categories this CVE belongs to.
Data Freshness Timeline
(refreshed 16× in last 7d / 75× in last 30d)
Each row is a source pipeline that fetched or updated this CVE on that date, with what changed. For example, "NVD update" means NVD published or revised its analysis for this CVE; "MITRE cvelistV5" means we ingested or refreshed it from the CNA feed. Most recent first.
Showing the most recent 100 of 105 total refreshes for this CVE.
- 2026-09-20 22:06 UTCEG score recompute
- 2026-09-20 22:06 UTCGHSA enrichment
- 2026-09-19 23:11 UTCEG score recompute
- 2026-09-19 23:11 UTCGHSA enrichment
- 2026-09-18 23:26 UTCEG score recompute
- 2026-09-18 23:26 UTCGHSA enrichment
- 2026-09-18 19:27 UTCEPSS rescore
- 2026-09-18 00:31 UTCEG score recompute
- 2026-09-18 00:31 UTCGHSA enrichment
- 2026-09-17 00:14 UTCEG score recompute
- 2026-09-17 00:13 UTCGHSA enrichment
- 2026-09-16 14:07 UTCEPSS rescore
- 2026-09-16 05:14 UTCEPSS rescore
- 2026-09-15 21:56 UTCEG score recompute
- 2026-09-15 21:56 UTCGHSA enrichment
- 2026-09-14 22:51 UTCGHSA enrichment
- 2026-09-13 23:57 UTCEG score recompute
- 2026-09-13 23:57 UTCGHSA enrichment
- 2026-09-13 16:46 UTCEPSS rescore
- 2026-09-13 01:03 UTCEG score recompute
- 2026-09-13 01:03 UTCGHSA enrichment
- 2026-09-12 15:00 UTCEPSS rescore
- 2026-09-12 02:09 UTCEG score recompute
- 2026-09-12 02:09 UTCGHSA enrichment
- 2026-09-11 14:52 UTCEPSS rescore
Show 75 moreShow fewer
- 2026-09-11 09:36 UTCEPSS rescore
- 2026-09-11 03:13 UTCEG score recompute
- 2026-09-11 03:13 UTCGHSA enrichment
- 2026-09-10 09:34 UTCEPSS rescore
- 2026-09-10 04:18 UTCGHSA enrichment
- 2026-09-09 05:08 UTCEG score recompute
- 2026-09-09 05:08 UTCGHSA enrichment
- 2026-09-08 22:00 UTCEPSS rescore
- 2026-09-07 21:22 UTCEG score recompute
- 2026-09-07 21:22 UTCGHSA enrichment
- 2026-09-07 16:01 UTCEPSS rescore
- 2026-09-06 22:28 UTCEG score recompute
- 2026-09-06 22:28 UTCGHSA enrichment
- 2026-09-06 13:47 UTCEPSS rescore
- 2026-09-05 23:33 UTCGHSA enrichment
- 2026-09-05 00:38 UTCEG score recompute
- 2026-09-05 00:38 UTCGHSA enrichment
- 2026-09-03 23:13 UTCGHSA enrichment
- 2026-09-02 23:24 UTCEG score recompute
- 2026-09-02 23:24 UTCGHSA enrichment
- 2026-09-02 14:11 UTCEPSS rescore
- 2026-09-01 15:03 UTCEG score recompute▲ 0.80
- 2026-09-01 15:03 UTCGHSA enrichment
- 2026-09-01 14:52 UTCNVD updateCVSS v3 → 5.5
- 2026-09-01 13:53 UTCEPSS rescore
- 2026-08-31 21:38 UTCGHSA enrichment
- 2026-08-30 14:09 UTCEG score recompute
- 2026-08-30 14:09 UTCGHSA enrichment
- 2026-08-30 01:22 UTCEPSS rescore
- 2026-08-29 15:10 UTCEG score recompute
- 2026-08-29 15:10 UTCGHSA enrichment
- 2026-08-28 21:41 UTCEPSS rescore
- 2026-08-28 15:57 UTCGHSA enrichment
- 2026-08-27 23:03 UTCEG score recompute
- 2026-08-27 23:03 UTCGHSA enrichment
- 2026-08-27 14:25 UTCEPSS rescore
- 2026-08-27 00:09 UTCEG score recompute
- 2026-08-27 00:09 UTCGHSA enrichment
- 2026-08-26 14:46 UTCEPSS rescore
- 2026-08-26 01:15 UTCEG score recompute
- 2026-08-26 01:14 UTCGHSA enrichment
- 2026-08-25 13:48 UTCEPSS rescore
- 2026-08-25 02:20 UTCEG score recompute
- 2026-08-25 02:20 UTCGHSA enrichment
- 2026-08-24 03:25 UTCGHSA enrichment
- 2026-08-23 04:31 UTCEG score recompute
- 2026-08-23 04:31 UTCGHSA enrichment
- 2026-08-23 00:19 UTCEPSS rescore
- 2026-08-22 05:36 UTCEG score recompute
- 2026-08-22 05:36 UTCGHSA enrichment
- 2026-08-21 23:49 UTCEPSS rescore
- 2026-08-21 06:42 UTCEG score recompute
- 2026-08-21 06:42 UTCGHSA enrichment
- 2026-08-20 22:55 UTCEPSS rescore
- 2026-08-20 07:47 UTCEG score recompute
- 2026-08-20 07:47 UTCGHSA enrichment
- 2026-08-19 17:03 UTCEPSS rescore
- 2026-08-19 08:53 UTCGHSA enrichment
- 2026-08-18 09:56 UTCEG score recompute
- 2026-08-18 09:56 UTCGHSA enrichment
- 2026-08-17 13:47 UTCEPSS rescore
- 2026-08-17 11:02 UTCEG score recompute
- 2026-08-17 11:02 UTCGHSA enrichment
- 2026-08-16 14:56 UTCEPSS rescore
- 2026-08-16 12:08 UTCEG score recompute
- 2026-08-16 12:08 UTCGHSA enrichment
- 2026-08-16 02:14 UTCEPSS rescore
- 2026-08-15 13:15 UTCEG score recompute
- 2026-08-15 13:15 UTCGHSA enrichment
- 2026-08-15 01:30 UTCEPSS rescore
- 2026-08-14 14:20 UTCEG score recompute
- 2026-08-14 14:20 UTCGHSA enrichment
- 2026-08-13 22:00 UTCEPSS rescore
- 2026-08-13 15:26 UTCEG score recompute
- 2026-08-13 15:26 UTCGHSA enrichment
Related CVEs(same CWE)
Same CWE
10 shownCWE-122
Frequently asked(5)
What is CVE-2026-19694?
When was CVE-2026-19694 disclosed?
Is CVE-2026-19694 actively exploited?
What is the CVSS score of CVE-2026-19694?
How do I remediate CVE-2026-19694?
Dependency Blast Radius
See which npm, PyPI, Go, and Maven packages are affected by CVE-2026-19694
Is Your Infrastructure Affected by CVE-2026-19694?
EchelonGraph automatically scans your cloud infrastructure and maps CVE exposure using blast radius analysis.