Wireshark

Search everything

Mentions · 7d4
Mentions · 30d6
All mentions9
First seenAug 13, 2026
Last mentioned1d ago

Timeline

9 articles · newest first

Wireshark LBMC reassembly bug allows remote code execution

Only Wireshark installs with LBMC fragment reassembly enabled are affected; ZDI rates it CVSS 7.5.

ZDI Published AdvisoriesNov 10, 06:00 UTC · 1d agoVulnerability 3 sources1

Wireshark SMB object export overflow allows remote code execution

ZDI rates the integer overflow 8.8 and says user interaction is required; no CVE is listed.

ZDI Published AdvisoriesNov 10, 06:00 UTC · 1d agoVulnerability 3 sources

Wireshark LoRaWAN decryption flaw can yield remote code execution

Only Wireshark instances with LoRaWAN decryption enabled are vulnerable; ZDI rates it CVSS 7.1.

ZDI Published AdvisoriesNov 10, 06:00 UTC · 1d agoVulnerability 3 sources

Cellebrite leads 2026 digital forensics tools rankings

The guide evaluates Cellebrite, Magnet Forensics, OpenText EnCase, and open-source tools like Wireshark and Autopsy for mobile, disk, and network forensics.

GBHackersNov 5, 07:10 UTC · 6d agoIndustry1

QPACK flaws let one HTTP/3 connection exhaust server memory

Seven of ten tested stacks were vulnerable; quic-go, quiche, lsquic and Wireshark had fixes as of October 20, 2026.

Lobsters · securityOct 22, 15:15 UTC · 20d agoVulnerabilityCVE-2025-64702 CVE-2026-12523 CVE-2025-139452 · 1 read

QPACK flaws can crash HTTP/3 servers via memory amplification

FoxIO released PoCs; quic-go, quiche, lsquic, and Wireshark are patched, while Bun, h3, and aioquic were not.

The Hacker NewsOct 22, 06:38 UTC · 20d agoVulnerabilityCVE-2025-64702 CVE-2026-12523 CVE-2025-139455 · 1 read

Wireshark 4.6.9 Fixes 19 Vulnerabilities Including Code Execution Via Malicious Packet

Wireshark 4.6.9 and 4.4.19 patch 19 flaws, including code execution via a malicious profile.

Cyber Security NewsSep 28, 03:38 UTC · Sep 28, 2026VulnerabilityCVE-2026-964194 · 1 read

ZDI-26-747: Wireshark RF4CE Packet Parsing Buffer Overflow Remote Code Execution Vulnerability

ZDI disclosed a Wireshark RF4CE parsing buffer overflow enabling remote code execution, CVE-2026-96417.

ZDI Published AdvisoriesSep 23, 05:00 UTC · Sep 23, 2026VulnerabilityCVE-2026-964171 · 1 read

Wireshark 4.6.8 patches 28 security bugs, nine in file parsers

Wireshark 4.6.8 fixes 28 security bugs, including nine crash-prone capture file parsers, misdecoded 5G fields, and memory-safety issues.

Help Net SecurityAug 13, 00:00 UTC · Aug 13, 2026Advisory1

Related CVEs

by mentions

CVE-2026-12523<1%7.5
Summary Cloudflare quiche's HTTP/3 layer was discovered to be vulnerable to resource exhaustion (i.e., memory) by means of specially crafted HTTP/3 frames
published Jul 14, 2026cloudflare quiche
CVE-2025-13945<1%5.5
HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service
published Dec 3, 2025wireshark wiresharkPoC ×2
CVE-2025-64702<1%5.3
quic-go is an implementation of the QUIC protocol in Go
published Dec 11, 2025quic-go project quic-goPoC
CVE-2026-96419<1%7.8
Profile import crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service and possible code execution
published Sep 29, 2026wireshark wiresharkPoC
CVE-2026-96417<1%5.5
RF4CE protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
published Sep 29, 2026wireshark wiresharkPoC

Appears with

Wiresharkproduct · 3
quicheproduct · 2
Cloudflarevendor · 2
aioquicproduct · 2
Bunproduct · 2
quic-goproduct · 2
lsquicproduct · 2
h3product · 2
Zero Day Initiativeorganization · 2
IISproduct · 1
Exterro FTKproduct · 1
OpenText EnCaseproduct · 1
Wiresharkorganization · 1
LiteSpeedvendor · 1
Parabenvendor · 1
Autopsyvendor · 1

Entities are extracted by the model from each article. First seen Aug 13, 2026, last mentioned 1d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.