CVE-2026-5405

nvd.nist.gov • May 7, 2026

This CVE record has been updated after NVD enrichment efforts were completed. Enrichment data supplied by the NVD may require amendment due to these changes.

RDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution

Denotes Vulnerable Software Are we missing a CPE here? Please let us know .

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Vulnerabilities in Wireshark Allow Denial of Service and Code Execution Two critical vulnerabilities have been identified in Wireshark versions 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14. CVE-2026-5405 involves a crash in the RDP protocol dissector, while CVE-2026-5656 pertains to a profile import path traversal issue. Both vulnerabilities allow for denial of service and potential code execution, affecting users of these Wireshark versions. The vulnerabilities were published on April 30, 2026, and are currently being monitored for active exploitation. Users are advised to check for updates and apply patches as necessary to mitigate risks. The NVD has enriched the CVE records, but further CPE information may be required. 2 sources 71

Extracted Entities

Attack Types (2)

Code Execution Denial of Service

CVEs (1)

CVE-2026-5405