CVE-2026-5402

Name of the Vulnerable Software and Affected Versions Wireshark versions 4.6.0 through 4.6.4

Description A heap overflow exists in the TLS protocol dissector. A remote attacker can exploit this issue by sending malformed packets or malicious capture files, potentially leading to a denial of service or the execution of arbitrary code. In real-world scenarios, attackers may use this to achieve code execution and subsequently pivot laterally across network infrastructure.

Recommendations Update to version 4.6.5.