Skip to content
NewA calmer, faster ZeroHour
StoryVulnerabilityhigh

ZDI publishes three Wireshark remote code execution advisories

1 source · 3 articlesFirst reported Updated ()
What's new

First merged summary.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

ZDI published three Wireshark remote code execution advisories; no CVEs, patches, or exploitation status are stated.

On November 10, 2026, the Zero Day Initiative published three Wireshark remote code execution advisories. ZDI-26-899 is an integer overflow in LBMC fragment reassembly, rated CVSS 7.5, that needs no authentication but applies only when that feature is enabled. ZDI-26-900 is an integer overflow in SMB object export, rated CVSS 8.8, that requires user interaction. ZDI-26-898 is a numeric truncation error in LoRaWAN decryption, rated CVSS 7.1, reachable by a network-adjacent attacker without authentication only when decryption is enabled. None of the snippets names a CVE, affected or fixed versions, a patch, or exploitation status.

Key facts
  • ZDI-26-899: LBMC fragment reassembly integer overflow, CVSS 7.5, no authentication.
  • Only installs with LBMC fragment reassembly enabled are affected by ZDI-26-899.
  • ZDI-26-900: SMB object export integer overflow, CVSS 8.8, user interaction required.
  • ZDI-26-898: LoRaWAN decryption numeric truncation, CVSS 7.1, network-adjacent access.
  • No CVE, versions, patch, or exploitation status is stated for any advisory.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Timeline

dated events in the reporting · oldest first
  1. Nov 10, 2026ZDI publishes three Wireshark remote code execution advisories. · ZDI Published Advisories

What each outlet adds

beyond the shared facts
  • ZDI Published AdvisoriesSole source for all three advisory IDs, scores, and preconditions.
Vendors
Wireshark
Organizations
Zero Day Initiative

Coverage

oldest first · one row per article · UTC
  1. · 1d ago ZDI Published AdvisoriesFirst report

    Wireshark LBMC reassembly bug allows remote code execution

    Only Wireshark installs with LBMC fragment reassembly enabled are affected; ZDI rates it CVSS 7.5.

  2. · 1d ago ZDI Published Advisories

    Wireshark LoRaWAN decryption flaw can yield remote code execution

    Only Wireshark instances with LoRaWAN decryption enabled are vulnerable; ZDI rates it CVSS 7.1.

  3. · 1d ago ZDI Published Advisories

    Wireshark SMB object export overflow allows remote code execution

    ZDI rates the integer overflow 8.8 and says user interaction is required; no CVE is listed.