PT-2026-36040

CVE-2026-6868

Published

2026-04-30

Updated

2026-08-05

Description by

CVSS 2.0

7.8

High

MetricsAV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Wireshark versions 4.6.0 through 4.6.4 Wireshark versions 4.4.0 through 4.4.14

Description A crash in the HTTP protocol dissector allows for a denial of service. This occurs when the software processes malformed traffic, which can lead to the crashing of analysis sessions.

Recommendations Update Wireshark versions 4.6.0 through 4.6.4 to a patched version. Update Wireshark versions 4.4.0 through 4.4.14 to a patched version.

Exploitability

Exploit

Fix

Impacts

Researchers

Sharon Brizinov

Vendors

Affected products

Weakness enumeration

CWE-121: Stack-based Buffer Overflow

Related identifiers

CVE-2026-6868