PT-2026-36048 · Wireshark · Wireshark

Duc Anh Nguyen · Published 2026-04-29 · Updated 2026-06-01 · CVE-2026-5402

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Wireshark versions 4.6.0 through 4.6.4

Description A heap overflow exists in the TLS protocol dissector. A remote attacker can exploit this issue by sending malformed packets or malicious capture files, potentially leading to a denial of service or the execution of arbitrary code. In real-world scenarios, attackers may use this to achieve code execution and subsequently pivot laterally across network infrastructure.

Recommendations Update to version 4.6.5.

Exploit

Fix

DoS

RCE

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

BDU:2026-06164

CVE-2026-5402

OPENSUSE-SU-2026:10686-1

Affected Products

Wireshark

References · 61

• 🔥 https://gitlab.com/wireshark/wireshark/-/work_items/21090 · Exploit
• 🔥 https://gitlab.com/wireshark/wireshark/-/issues/21090 · Exploit
• https://bdu.fstec.ru/vul/2026-06164 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-5402 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-5402 · Vendor Advisory
• https://wireshark.org/security/wnpa-sec-2026-14.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-5402 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-5402 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-5402 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10686-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-5402 · Security Note
• https://suse.com/security/cve/CVE-2026-6537 · Note
• https://suse.com/security/cve/CVE-2026-5655 · Note
• https://suse.com/security/cve/CVE-2026-7375 · Note
• https://suse.com/security/cve/CVE-2026-6527 · Note