Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2026-76886 | 9.8 critical | 0.00% | wireshark | C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service | 24 Oct |
| CVE-2026-5402 | 8.8 high | 0.00% | wireshark | TLS protocol dissector heap overflow in Wireshark 4.6.0 to 4.6.4 allows denial of service and possible code execution | Mon 26 Oct |
| CVE-2026-95387 | 8.8 high | 0.00% | wireshark | SPDY protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service | 8 Oct |
| CVE-2026-95389 | 8.1 high | 0.00% | wireshark | SCTP protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service | 8 Oct |
| CVE-2026-5405 | 7.8 high | 0.00% | wireshark | RDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution | Mon 26 Oct |
| CVE-2026-96419 | 7.8 high | 0.00% | wireshark | Profile import crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service and possible code execution | 8 Oct |
| CVE-2026-5654 | 7.5 high | 0.00% | wireshark | AMR-NB codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service | Mon 26 Oct |
| CVE-2026-6519 | 7.5 high | 0.00% | wireshark | MBIM protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service | Mon 26 Oct |
| CVE-2026-6520 | 7.5 high | 0.00% | wireshark | OpenFlow v6 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service | Mon 26 Oct |
| CVE-2026-7375 | 7.5 high | 0.00% | wireshark | UDS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service | Sun 25 Oct |
| CVE-2026-15163 | 7.5 high | 0.00% | wireshark | Multiple protocol dissector infinite loops in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allow denial of service | Sun 25 Oct |
| CVE-2026-15169 | 7.5 high | 0.00% | wireshark | UMTS FP protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service | Sun 25 Oct |
| CVE-2026-96423 | 7.1 high | 0.00% | wireshark | X11 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service | 14 Oct |
| CVE-2026-43901 | 6.8 medium | 0.00% | bx33661, wireshark_mcp | Wireshark MCP is an MCP Server that turns tshark into a structured analysis interface, then layers in optional Wireshark suite utilities. In 1.1.5 and earlier, wireshark-mcp exposes a wireshark_export_objects MCP tool that accepts an attacker-controlled dest_dir parameter and passes it to tshark's --export-objects flag with no mandatory path restriction. The path sandbox (_allowed_dirs) is None by default and only activates when the environment variable WIRESHARK_MCP_ALLOWED_DIRS is explicitly set. In a default installation, any directory on the filesystem can be used as the export destination. | Mon 26 Oct |
| CVE-2026-5299 | 5.5 medium | 0.00% | wireshark | ICMPv6 PvD protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service | Mon 26 Oct |
| CVE-2026-6522 | 5.5 medium | 0.00% | wireshark | RPKI-Router protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service | Mon 26 Oct |
| CVE-2026-6524 | 5.5 medium | 0.00% | wireshark | MySQL protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service | Mon 26 Oct |
| CVE-2026-6526 | 5.5 medium | 0.00% | wireshark | RTSP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 | Mon 26 Oct |
| CVE-2026-6528 | 5.5 medium | 0.00% | wireshark | TLS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 allows denial of service | Mon 26 Oct |
| CVE-2026-6530 | 5.5 medium | 0.00% | wireshark | DCP-ETSI protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service | Mon 26 Oct |
| CVE-2026-6533 | 5.5 medium | 0.00% | wireshark | Dissection engine LZ77 decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service | Mon 26 Oct |
| CVE-2026-6538 | 5.5 medium | 0.00% | wireshark | BEEP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service | Sun 25 Oct |
| CVE-2026-6870 | 5.5 medium | 0.00% | wireshark | GSM RP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service | Sun 25 Oct |
| CVE-2026-15164 | 5.5 medium | 0.00% | wireshark | Crash in ciscodump 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service | Sun 25 Oct |
| CVE-2026-15165 | 5.5 medium | 0.00% | wireshark | TLS ECH decryptor crash in Wireshark 4.6.0 to 4.6.6 allows denial of service | Sun 25 Oct |
| CVE-2026-15166 | 5.5 medium | 0.00% | wireshark | IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service | Sun 25 Oct |
| CVE-2026-15167 | 5.5 medium | 0.00% | wireshark | DBS Etherwatch file parser crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service | Sun 25 Oct |
| CVE-2026-15170 | 5.5 medium | 0.00% | wireshark | Z39.50 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service | Sun 25 Oct |
| CVE-2026-15171 | 5.5 medium | 0.00% | wireshark | SSH protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service | Sun 25 Oct |
| CVE-2026-15172 | 5.5 medium | 0.00% | wireshark | FMP/NOTIFY protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service | Sun 25 Oct |
| CVE-2026-15173 | 5.5 medium | 0.00% | wireshark | pcapng file parser crash in Wireshark 4.6.0 to 4.6.6 allows denial of service | Sun 25 Oct |
| CVE-2026-15174 | 5.5 medium | 0.00% | wireshark | Catapult DCT2000 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service | Sun 25 Oct |
| CVE-2026-19694 | 5.5 medium | 0.00% | wireshark | TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service | 23 Oct |
| CVE-2026-19695 | 5.5 medium | 0.00% | wireshark | Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service | 23 Oct |
| CVE-2026-19696 | 5.5 medium | 0.00% | wireshark | Ixia IxVeriWave and Vector Informatik BLF file parser crashes in 4.6.0 to 4.6.7 allows denial of service on Windows | 23 Oct |
| CVE-2025-11626 | 5.5 medium | 0.00% | wireshark | MONGO dissector infinite loop in Wireshark 4.4.0 to 4.4.9 and 4.2.0 to 4.2.13 allows denial of service | 19 Oct |
| CVE-2025-13499 | 5.5 medium | 0.00% | wireshark | Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service | 19 Oct |
| CVE-2025-13674 | 5.5 medium | 0.00% | wireshark | BPv7 dissector crash in Wireshark 4.6.0 allows denial of service | 18 Oct |
| CVE-2026-95386 | 5.5 medium | 0.00% | wireshark | TTL file parser infinite loop in 4.6.0 to 4.6.8 allows denial of service | 8 Oct |
| CVE-2026-95388 | 5.5 medium | 0.00% | wireshark | Sharkd utility crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service | 8 Oct |
| CVE-2026-95390 | 5.5 medium | 0.00% | wireshark | PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service | 8 Oct |
| CVE-2026-95391 | 5.5 medium | 0.00% | wireshark | ZigBee ZCL protocol dissector crash in 4.6.0 to 4.6.8 allows denial of service | 8 Oct |
| CVE-2026-95392 | 5.5 medium | 0.00% | wireshark | MBIM protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service | 8 Oct |
| CVE-2026-95395 | 5.5 medium | 0.00% | wireshark | IEEE C37.118 Synchrophasor protocol dissector memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service | 8 Oct |
| CVE-2026-96418 | 5.5 medium | 0.00% | wireshark | TIFF protocol dissector infinite loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service | 8 Oct |
| CVE-2026-96417 | 5.5 medium | 0.00% | wireshark | RF4CE protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service | 8 Oct |
| CVE-2026-96416 | 5.5 medium | 0.00% | wireshark | IEEE 802.11 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service | 8 Oct |
| CVE-2026-96415 | 5.5 medium | 0.00% | wireshark | Catapult DCT2000 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service | 8 Oct |
| CVE-2026-95393 | 4.7 medium | 0.00% | wireshark | CSN.1 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service | 8 Oct |
| CVE-2026-95394 | 4.7 medium | 0.00% | wireshark | Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service | 8 Oct |
50 of 51 · Next
Download these 51 as CSV · subscribe to this list.
EPSS scores: 2026-10-30. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.