Multiple Wireshark Vulnerabilities Allow Arbitrary Code Execution via Malformed Packets

Gbhackers •Divya • May 1, 2026

The Wireshark Foundation has released version 4.6.5 of its widely used network protocol analyzer, addressing a massive wave of security vulnerabilities. This urgent update patches over 40 distinct security flaws, driven by a recent surge in AI-assisted vulnerability reports. The most critical bugs in this release allow for possible arbitrary code execution, elevating the risk […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Wireshark Vulnerabilities Enable Arbitrary Code Execution Wireshark has released version 4.6.5 to address over 40 vulnerabilities, including critical flaws that allow attackers to execute arbitrary code via malformed packets or malicious capture files. This update is crucial for organizations and individuals using Wireshark for network monitoring and analysis. The vulnerabilities were highlighted following a surge in AI-assisted vulnerability reports. Users are urged to update immediately to mitigate the risks associated with these security flaws. The specific CVEs related to these vulnerabilities have not been disclosed in the articles. The update is essential for maintaining the integrity and security of network traffic analysis. Failure to update could leave systems exposed to potential exploitation. 6 sources 72

Extracted Entities

Tools (1)

Wireshark