First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2026-19694

MediumCVSS 5.5/10Last modified Oct 23, 2026

Description

TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Wireshark Foundation	Wireshark	>= 4.6.0, < 4.6.8

References

https://gitlab.com/wireshark/wireshark/-/work_items/21389Exploit, Mitigation, Vendor Advisory
https://www.wireshark.org/security/wnpa-sec-2026-68.htmlVendor Advisory
https://gitlab.com/wireshark/wireshark/-/work_items/21389Exploit, Mitigation, Vendor Advisory

Timeline

Published: Aug 13, 2026
Last modified: Oct 23, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-196955.5Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service CVE-2026-196965.5Ixia IxVeriWave and Vector Informatik BLF file parser crashes in 4.6.0 to 4.6.7 allows denial of service on Windows CVE-2026-196976.8The GutenKit WordPress plugin before 2.5.0 does not sanitise uploaded SVG files on all of the upload paths it enables, allowing users with CVE-2026-196983.5The GutenKit WordPress plugin before 2.5.1 does not validate or escape style settings saved against a post before using them to build the CS CVE-2026-196992.7The GutenKit WordPress plugin before 2.5.0 does not have a sufficient capability check on some of its REST API endpoints, allowing users wi CVE-2026-19706.1A flaw has been found in Edimax BR-6258n up to 1.18. This issue affects the function formStaDrvSetup of the file /goform/formStaDrvSetup. Th CVE-2026-197027.8Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TÜBİTAK BİLGEM Software Technolo CVE-2026-197035.1A weak password hashing vulnerability has been identified on SonicOS virtual appliances, which in specific conditions could potentially enab CVE-2026-197045.3The Comments WordPress plugin before 7.6.66 does not validate a value used to build a database query, allowing unauthenticated users to inj CVE-2026-197068.3During ABI bootstrap, the bootstrap node's approve-csr.service approves and signs every CSR without identity validation. An attacker on the CVE-2026-197085.9The File Manager WordPress plugin before 8.0.5 does not prevent unauthenticated users from downloading its database backup archives, and in CVE-2026-197095.3The Membership For WooCommerce WordPress plugin before 3.1.2 does not check that an API consumer secret has actually been generated before c