LeakyCreds
NewInstant webhook alerts now available — notified within seconds of any credential detection.Learn more →

CVE-2026-5655 - Vulnerability Analysis

MediumCVSS: 5.5

Last Updated: May 1, 2026

Wireshark - Denial of Service

Published: April 30, 2026Updated: May 1, 2026PoC Available

Overview

Wireshark 4.6.0 to 4.6.4 contains a denial of service caused by a crash in the SDP protocol dissector, letting remote attackers cause application crash, exploit requires crafted network packets.

Severity & Score

Severity: Medium
CVSS Score: 5.5

Impact

Remote attackers can cause Wireshark to crash, resulting in denial of service.

Mitigation

Update to Wireshark version later than 4.6.4.

Details

CVE ID
CVE-2026-5655
Severity
Medium
CVSS Score
5.5
Type
undefined
Status
confirmed

CWE

  • CWE-416

CVSS Metrics

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H