# Wireshark vulnerabilities Source: https://junglewise.ai/threats/vendors/wireshark Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 12 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/wireshark.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 57 vulnerabilities in Wireshark: 0 in the last 7 days and 10 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-96421, was published on 29 September 2026. Nothing in the last four weeks, down from 1 vulnerability in the four before. 1 technology has a page of its own. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 10 - All time: 57 (0 critical, 0 exploited in the wild) ## About Wireshark Wireshark is a network protocol analyzer that captures and displays packet data in real-time. ## Latest Wireshark vulnerabilities - [CVE-2026-96421: Wireshark USB HID dissector infinite loop in Usage range parsing](https://junglewise.ai/threats/cve-2026-96421-usb-hid-protocol-dissector-infinite-loop-and-memory-leak-in-4-6-0) (medium, CVSS 5.5, published 29 Sep 2026) - [CVE-2026-76929: Wireshark pcapng file parser heap out-of-bounds read](https://junglewise.ai/threats/cve-2026-76929-wireshark-pcapng-file-parser-heap-out-of-bounds-read) (medium, CVSS 4.7, published 19 Aug 2026) - [CVE-2026-76924: Wireshark Kerberos dissector heap buffer overflow](https://junglewise.ai/threats/cve-2026-76924-wireshark-kerberos-dissector-heap-buffer-overflow) (medium, CVSS 5.5, published 19 Aug 2026) - [CVE-2026-76921: Wireshark CMS protocol dissector heap-use-after-free](https://junglewise.ai/threats/cve-2026-76921-wireshark-cms-protocol-dissector-heap-use-after-free) (medium, CVSS 5.5, published 19 Aug 2026) - [CVE-2026-76919: Wireshark ESS protocol dissector crash via uninitialized pointer](https://junglewise.ai/threats/cve-2026-76919-wireshark-ess-protocol-dissector-crash-via-uninitialized-pointer) (medium, CVSS 5.3, published 19 Aug 2026) - [CVE-2026-76918: Wireshark SSH dissector heap buffer overflow in curve25519](https://junglewise.ai/threats/cve-2026-76918-wireshark-ssh-dissector-heap-buffer-overflow-in-curve25519) (medium, CVSS 5.5, published 19 Aug 2026) - [CVE-2026-76917: Wireshark Bluetooth AVRCP dissector heap buffer overflow](https://junglewise.ai/threats/cve-2026-76917-wireshark-bluetooth-avrcp-dissector-heap-buffer-overflow) (medium, CVSS 5.5, published 19 Aug 2026) - [CVE-2026-76891: Wireshark sharkd use-after-return in RTP tap listener](https://junglewise.ai/threats/cve-2026-76891-wireshark-sharkd-use-after-return-in-rtp-tap-listener) (low, CVSS 3.1, published 19 Aug 2026) - [CVE-2026-76890: Wireshark sharkd use-after-return in iograph tap listeners](https://junglewise.ai/threats/cve-2026-76890-wireshark-sharkd-use-after-return-in-iograph-tap-listeners) (low, CVSS 3.1, published 19 Aug 2026) - [CVE-2026-76887: Wireshark dissection engine integer overflow in packet reassembly](https://junglewise.ai/threats/cve-2026-76887-wireshark-dissection-engine-integer-overflow-in-packet-reassembly) (low, CVSS 3.1, published 19 Aug 2026) - [CVE-2026-19696: Wireshark out-of-bounds write in phtoleu16 helper](https://junglewise.ai/threats/cve-2026-19696-wireshark-out-of-bounds-write-in-phtoleu16-helper) (medium, CVSS 6.6, published 13 Aug 2026) - [CVE-2026-19695: Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service](https://junglewise.ai/threats/cve-2026-19695-gammu-dct3-trace-file-parser-crash-in-4-6-0-to-4-6-7-allows) (medium, CVSS 4.7, published 13 Aug 2026) - [CVE-2026-19694: TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service](https://junglewise.ai/threats/cve-2026-19694-ttx-logger-file-parser-crash-in-4-6-0-to-4-6-7-allows-denial-of) (medium, CVSS 4.7, published 13 Aug 2026) - [CVE-2026-6525: IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.4](https://junglewise.ai/threats/cve-2026-6525-ieee-802-11-protocol-dissector-crash-in-wireshark-4-6-0-to-4-6-4) (medium, CVSS 5.5, published 2 May 2026) - [CVE-2026-5404: K12 RF5 file parser crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service](https://junglewise.ai/threats/cve-2026-5404-k12-rf5-file-parser-crash-in-wireshark-4-6-0-to-4-6-4-and-4-4-0-to) (medium, CVSS 4.7, published 1 May 2026) - [CVE-2026-6870: GSM RP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service](https://junglewise.ai/threats/cve-2026-6870-gsm-rp-protocol-dissector-crash-in-wireshark-4-6-0-to-4-6-4-and-4) (medium, CVSS 5.5, published 30 Apr 2026) - [CVE-2026-6869: WebSocket protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service](https://junglewise.ai/threats/cve-2026-6869-websocket-protocol-dissector-crash-in-wireshark-4-6-0-to-4-6-4-and) (medium, CVSS 5.5, published 30 Apr 2026) - [CVE-2026-6867: SMB2 protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service](https://junglewise.ai/threats/cve-2026-6867-smb2-protocol-dissector-crash-in-wireshark-4-6-0-to-4-6-4-and-4-4) (medium, CVSS 5.5, published 30 Apr 2026) - [CVE-2026-6538: BEEP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service](https://junglewise.ai/threats/cve-2026-6538-beep-protocol-dissector-crash-in-wireshark-4-6-0-to-4-6-4-and-4-4) (medium, CVSS 5.5, published 30 Apr 2026) - [CVE-2026-6537: ZigBee protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service](https://junglewise.ai/threats/cve-2026-6537-zigbee-protocol-dissector-crash-in-wireshark-4-6-0-to-4-6-4-and-4) (medium, CVSS 5.5, published 30 Apr 2026) - [CVE-2026-6536: DLMS/COSEM protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4](https://junglewise.ai/threats/cve-2026-6536-dlms-cosem-protocol-dissector-infinite-loop-in-wireshark-4-6-0-to) (medium, CVSS 5.5, published 30 Apr 2026) - [CVE-2026-6535: Dissection engine zlib decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service](https://junglewise.ai/threats/cve-2026-6535-dissection-engine-zlib-decompression-crash-in-wireshark-4-6-0-to-4) (medium, CVSS 5.5, published 30 Apr 2026) - [CVE-2026-6534: USB HID protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service](https://junglewise.ai/threats/cve-2026-6534-usb-hid-protocol-dissector-infinite-loop-in-wireshark-4-6-0-to-4-6) (medium, CVSS 5.5, published 30 Apr 2026) - [CVE-2026-6533: Dissection engine LZ77 decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service](https://junglewise.ai/threats/cve-2026-6533-dissection-engine-lz77-decompression-crash-in-wireshark-4-6-0-to-4) (medium, CVSS 5.5, published 30 Apr 2026) - [CVE-2026-6532: Kismet protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service](https://junglewise.ai/threats/cve-2026-6532-kismet-protocol-dissector-crash-in-wireshark-4-6-0-to-4-6-4-and-4) (medium, CVSS 5.5, published 30 Apr 2026) ## Most severe Wireshark vulnerabilities - [CVE-2026-5402: Wireshark TLS protocol dissector heap overflow](https://junglewise.ai/threats/cve-2026-5402-wireshark-tls-protocol-dissector-heap-overflow) (high, CVSS 8.8, published 30 Apr 2026) - [CVE-2025-13499: Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service](https://junglewise.ai/threats/cve-2025-13499-kafka-dissector-crash-in-wireshark-4-6-0-and-4-4-0-to-4-4-10) (high, CVSS 7.8, published 21 Nov 2025) - [CVE-2017-5597: Wireshark DHCPv6 dissector integer overflow denial of service](https://junglewise.ai/threats/cve-2017-5597-wireshark-dhcpv6-dissector-integer-overflow-denial-of-service) (high, CVSS 7.5, published 25 Jan 2017) - [CVE-2017-5596: Wireshark ASTERIX dissector infinite loop denial of service](https://junglewise.ai/threats/cve-2017-5596-wireshark-asterix-dissector-infinite-loop-denial-of-service) (high, CVSS 7.5, published 25 Jan 2017) - [CVE-2026-19696: Wireshark out-of-bounds write in phtoleu16 helper](https://junglewise.ai/threats/cve-2026-19696-wireshark-out-of-bounds-write-in-phtoleu16-helper) (medium, CVSS 6.6, published 13 Aug 2026) - [CVE-2026-5657: iLBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service](https://junglewise.ai/threats/cve-2026-5657-ilbc-codec-crash-in-wireshark-4-6-0-to-4-6-4-and-4-4-0-to-4-4-14) (medium, CVSS 5.5, published 30 Apr 2026) - [CVE-2026-5655: SDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 allows denial of service](https://junglewise.ai/threats/cve-2026-5655-sdp-protocol-dissector-crash-in-wireshark-4-6-0-to-4-6-4-allows) (medium, CVSS 5.5, published 30 Apr 2026) - [CVE-2026-5654: AMR-NB codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service](https://junglewise.ai/threats/cve-2026-5654-amr-nb-codec-crash-in-wireshark-4-6-0-to-4-6-4-and-4-4-0-to-4-4-14) (medium, CVSS 5.5, published 30 Apr 2026) - [CVE-2026-5653: DCP-ETSI protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service](https://junglewise.ai/threats/cve-2026-5653-dcp-etsi-protocol-dissector-crash-in-wireshark-4-6-0-to-4-6-4-and) (medium, CVSS 5.5, published 30 Apr 2026) - [CVE-2026-6532: Kismet protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service](https://junglewise.ai/threats/cve-2026-6532-kismet-protocol-dissector-crash-in-wireshark-4-6-0-to-4-6-4-and-4) (medium, CVSS 5.5, published 30 Apr 2026) ## Vulnerabilities per week Nothing in the last four weeks, down from 1 vulnerability in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 9 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 1 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Wireshark technologies - [Wireshark](https://junglewise.ai/threats/technologies/wireshark): 60 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Wireshark vulnerabilities", https://junglewise.ai/threats/vendors/wireshark, 12 November 2026.