← All advisories

Low severity2.5NVD Advisory· Published Jul 8, 2026· Updated Jul 9, 2026

CVE-2026-15168

CVE-2026-15168

Description

BLF file parser in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows possible information disclosure

Affected products

4

Wireshark/Wireshark2 versions
cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*range: >=4.4.0,<4.4.17
- (no CPE)range: 4.6.0 to 4.6.6, 4.4.0 to 4.4.16
osv-coords2 versions
pkg:rpm/opensuse/wireshark&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/wireshark&distro=openSUSE%20Tumbleweed
< 4.4.17-160000.1.1+ 1 more
- (no CPE)range: < 4.4.17-160000.1.1
- (no CPE)range: < 4.6.7-3.1

Patches

Vulnerability mechanics

References

1

www.wireshark.org/security/wnpa-sec-2026-60.htmlnvdVendor Advisory

News mentions

1

Wireshark: Twelve DoS and Info Disclosure Vulnerabilities Disclosed Together
Vypr Intelligence · Jul 8, 2026