Vulnerability in Wireshark Foundation Wireshark

[ Why it matters ]Priority signals

• Public proof-of-concept exploit exists (CISA SSVC)

[ Description ]Official description

Frame protocol metadissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

[ Fixes ]Fixes and patches

• Patch on gitlab.comVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD

[ Advisories ]Government CERT advisories

• CERT-FR24 Sep 2026CERTFR-2026-AVI-1221

  Multiple vulnerabilities in Wireshark Translated from French

  Multiple vulnerabilities have been discovered in Wireshark. They allow an attacker to cause remote arbitrary code execution and remote denial of service.

  CVE-2026-96423CVE-2026-95390CVE-2026-96420+16 more CVEs
• BSI CERT-Bund23 Sep 2026WID-SEC-2026-3547

  Wireshark: Multiple vulnerabilities Translated from German

  CVE-2026-95391CVE-2026-95386CVE-2026-96423+16 more CVEs

[ References ]References

• gitlab.com/wireshark/wireshark/-/work_items/21525ExploitPatchVendor Advisory
• www.wireshark.org/security/wnpa-sec-2026-102.htmlVendor Advisory