Vulnerability Details CVE-2026-5405
RDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 5.6%
CVSS Severity
CVSS v3 Score 7.8
References
- https://gitlab.com/wireshark/wireshark/-/issues/21105
- https://www.wireshark.org/security/wnpa-sec-2026-17.html
- https://access.redhat.com/errata/RHSA-2026:20600
- https://access.redhat.com/errata/RHSA-2026:26182
- https://access.redhat.com/security/cve/CVE-2026-5405
- https://bugzilla.redhat.com/show_bug.cgi?id=2464273
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5405.json
Products affected by CVE-2026-5405
-
cpe:2.3:a:wireshark:wireshark:4.4.0
-
cpe:2.3:a:wireshark:wireshark:4.4.1
-
cpe:2.3:a:wireshark:wireshark:4.4.10
-
cpe:2.3:a:wireshark:wireshark:4.4.11
-
cpe:2.3:a:wireshark:wireshark:4.4.12
-
cpe:2.3:a:wireshark:wireshark:4.4.13
-
cpe:2.3:a:wireshark:wireshark:4.4.14
-
cpe:2.3:a:wireshark:wireshark:4.4.2
-
cpe:2.3:a:wireshark:wireshark:4.4.3
-
cpe:2.3:a:wireshark:wireshark:4.4.6
-
cpe:2.3:a:wireshark:wireshark:4.4.7
-
cpe:2.3:a:wireshark:wireshark:4.4.8
-
cpe:2.3:a:wireshark:wireshark:4.4.9
-
cpe:2.3:a:wireshark:wireshark:4.6.0
-
cpe:2.3:a:wireshark:wireshark:4.6.1
-
cpe:2.3:a:wireshark:wireshark:4.6.2
-
cpe:2.3:a:wireshark:wireshark:4.6.3
-
cpe:2.3:a:wireshark:wireshark:4.6.4