Vulnerability Details CVE-2026-5656
Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 7.8%
CVSS Severity
CVSS v3 Score 7.0
References
- https://gitlab.com/wireshark/wireshark/-/issues/21115
- https://www.wireshark.org/security/wnpa-sec-2026-21.html
- https://access.redhat.com/errata/RHSA-2026:20600
- https://access.redhat.com/errata/RHSA-2026:26182
- https://access.redhat.com/security/cve/CVE-2026-5656
- https://bugzilla.redhat.com/show_bug.cgi?id=2464276
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5656.json
Products affected by CVE-2026-5656
-
cpe:2.3:a:wireshark:wireshark:4.4.0
-
cpe:2.3:a:wireshark:wireshark:4.4.1
-
cpe:2.3:a:wireshark:wireshark:4.4.10
-
cpe:2.3:a:wireshark:wireshark:4.4.11
-
cpe:2.3:a:wireshark:wireshark:4.4.12
-
cpe:2.3:a:wireshark:wireshark:4.4.13
-
cpe:2.3:a:wireshark:wireshark:4.4.14
-
cpe:2.3:a:wireshark:wireshark:4.4.2
-
cpe:2.3:a:wireshark:wireshark:4.4.3
-
cpe:2.3:a:wireshark:wireshark:4.4.6
-
cpe:2.3:a:wireshark:wireshark:4.4.7
-
cpe:2.3:a:wireshark:wireshark:4.4.8
-
cpe:2.3:a:wireshark:wireshark:4.4.9
-
cpe:2.3:a:wireshark:wireshark:4.6.0
-
cpe:2.3:a:wireshark:wireshark:4.6.1
-
cpe:2.3:a:wireshark:wireshark:4.6.2
-
cpe:2.3:a:wireshark:wireshark:4.6.3
-
cpe:2.3:a:wireshark:wireshark:4.6.4