Findings

CVE-2026-5407

SMB2 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

Published Apr 30, 2026 · updated Jun 17, 2026 · wireshark wireshark

SMB2 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 30, 2026 · NIST NVD

    Detected

    SMB2 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

  2. Jun 17, 2026 · NIST NVD

    Updated

    SMB2 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

Affected

  • cpe wireshark/wiresharkversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-5407

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-5407

    SMB2 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

    nvd.nist.gov

References

CVE-2026-5407 · ZeroDay Findings