Findings

CVE-2026-5656

Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution

Published May 1, 2026 · updated Jul 15, 2026 · wireshark wireshark

Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. May 1, 2026 · NIST NVD

    Detected

    Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution

  2. Jul 15, 2026 · NIST NVD

    Updated

    Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution

Affected

  • cpe wireshark/wiresharkversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-5656

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-5656

    Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution

    nvd.nist.gov

References

CVE-2026-5656 · ZeroDay Findings