← All advisories

Medium severity5.5NVD Advisory· Published Apr 30, 2026· Updated May 1, 2026

CVE-2026-5407

CVE-2026-5407

Description

SMB2 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Wireshark/Wireshark2 versions
cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*range: >=4.4.0,<=4.4.14
- (no CPE)range: >=4.4.0 <=4.4.14, >=4.6.0 <=4.6.4
osv-coords
pkg:rpm/opensuse/wireshark&distro=openSUSE%20Tumbleweed
Range: < 4.6.5-1.1

Patches

Vulnerability mechanics

References

2

gitlab.com/wireshark/wireshark/-/issues/21073nvdExploitIssue Tracking
www.wireshark.org/security/wnpa-sec-2026-11.htmlnvdVendor Advisory

News mentions

0

No linked articles in our index yet.