Multiple Vulnerabilities in Wireshark Allow Denial of Service and Code Execution
Article Content
- •CVE-2026-5405 and CVE-2026-5656 affect Wireshark versions 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14.
- •Both vulnerabilities allow for denial of service and possible code execution.
- •Users are urged to apply patches to mitigate the risks associated with these vulnerabilities.
Two critical vulnerabilities have been identified in Wireshark versions 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14. CVE-2026-5405 involves a crash in the RDP protocol dissector, while CVE-2026-5656 pertains to a profile import path traversal issue. Both vulnerabilities allow for denial of service and potential code execution, affecting users of these Wireshark versions. The vulnerabilities were published on April 30, 2026, and are currently being monitored for active exploitation. Users are advised to check for updates and apply patches as necessary to mitigate risks. The NVD has enriched the CVE records, but further CPE information may be required.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track CVE-2026-5405 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host… 
Lazarus APT Launches Operation FlashHole Using AI and Post-Quantum Cryptography Kaspersky has identified a cyberespionage campaign, dubbed Operation FlashHole, attributed to the Lazarus APT group, active since July 2025. The campaign has targeted at least three organizations in South Korea's construction, software, and wire-communication sectors. Attack methods include spear-phishing emails…