Vulnerability in Wireshark Foundation Wireshark

[ Why it matters ]Priority signals

• Public proof-of-concept exploit exists (CISA SSVC)

[ Description ]Official description

Catapult DCT2000 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

• CERT-FR24 Sep 2026CERTFR-2026-AVI-1221

  Multiple vulnerabilities in Wireshark Translated from French

  Multiple vulnerabilities have been discovered in Wireshark. They allow an attacker to cause remote arbitrary code execution and remote denial of service.

  CVE-2026-96423CVE-2026-95390CVE-2026-96420+16 more CVEs
• BSI CERT-Bund23 Sep 2026WID-SEC-2026-3547

  Wireshark: Multiple vulnerabilities Translated from German

  CVE-2026-95391CVE-2026-95386CVE-2026-96423+16 more CVEs

[ References ]References

• gitlab.com/wireshark/wireshark/-/work_items/21589ExploitThird Party Advisory
• www.wireshark.org/security/wnpa-sec-2026-110.htmlVendor Advisory