RTSP protocol dissector crash in Wireshark 4.6.0 to 4.6.4

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1786479348 advisory.

  - LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via     packet injection or crafted capture file (CVE-2023-1993)

  - GQUIC dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet     injection or crafted capture file (CVE-2023-1994)

  - Memory handling issue in editcap could cause denial of service via crafted capture file (CVE-2024-4853)

  - Use after free issue in editcap could cause denial of service via crafted capture file (CVE-2024-4855)

  - Crash in ciscodump 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service (CVE-2026-15164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1785491682 advisory.

  - RPCoRDMA dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via     packet injection or crafted capture file (CVE-2023-1992)

  - LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via     packet injection or crafted capture file (CVE-2023-1993)

  - GQUIC dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet     injection or crafted capture file (CVE-2023-1994)

  - Memory handling issue in editcap could cause denial of service via crafted capture file (CVE-2024-4853)

  - Use after free issue in editcap could cause denial of service via crafted capture file (CVE-2024-4855)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1785491682 advisory.

  - RPCoRDMA dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via     packet injection or crafted capture file (CVE-2023-1992)

  - LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via     packet injection or crafted capture file (CVE-2023-1993)

  - GQUIC dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet     injection or crafted capture file (CVE-2023-1994)

  - Memory handling issue in editcap could cause denial of service via crafted capture file (CVE-2024-4853)

  - Use after free issue in editcap could cause denial of service via crafted capture file (CVE-2024-4855)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.6.9. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.6.9 advisory.

  - C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service     (CVE-2026-76879, CVE-2026-76886)

  - HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service (CVE-2025-13945)

  - MEGACO dissector infinite loop in Wireshark 4.6.0 to 4.6.1 and 4.4.0 to 4.4.11 allows denial of service     (CVE-2025-13946)

  - IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of     service (CVE-2026-0959)

  - HTTP3 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.2 allows denial of service     (CVE-2026-0960)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote Windows host is prior to 4.6.9. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.6.9 advisory.

  - C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service     (CVE-2026-76879, CVE-2026-76886)

  - HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service (CVE-2025-13945)

  - MEGACO dissector infinite loop in Wireshark 4.6.0 to 4.6.1 and 4.4.0 to 4.4.11 allows denial of service     (CVE-2025-13946)

  - IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of     service (CVE-2026-0959)

  - HTTP3 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.2 allows denial of service     (CVE-2026-0960)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.6.7. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.6.7 advisory.

  - Memory leak in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service (CVE-2026-7379)

  - Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and     possible code execution (CVE-2026-5656)

  - Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service (CVE-2025-13499)

  - BPv7 dissector crash in Wireshark 4.6.0 allows denial of service (CVE-2025-13674)

  - HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service (CVE-2025-13945)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote Windows host is prior to 4.6.7. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.6.7 advisory.

  - Memory leak in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service (CVE-2026-7379)

  - Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and     possible code execution (CVE-2026-5656)

  - Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service (CVE-2025-13499)

  - BPv7 dissector crash in Wireshark 4.6.0 allows denial of service (CVE-2025-13674)

  - HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service (CVE-2025-13945)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.6.6. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.6.6 advisory.

  - Memory leak in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service (CVE-2026-7379)

  - Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and     possible code execution (CVE-2026-5656)

  - Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service (CVE-2025-13499)

  - BPv7 dissector crash in Wireshark 4.6.0 allows denial of service (CVE-2025-13674)

  - HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service (CVE-2025-13945)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote Windows host is prior to 4.6.6. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.6.6 advisory.

  - Memory leak in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service (CVE-2026-7379)

  - Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and     possible code execution (CVE-2026-5656)

  - Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service (CVE-2025-13499)

  - BPv7 dissector crash in Wireshark 4.6.0 allows denial of service (CVE-2025-13674)

  - HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service (CVE-2025-13945)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.6.8. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.6.8 advisory.

  - Pcapng file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service (CVE-2026-76929)

  - C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service     (CVE-2026-76879, CVE-2026-76886)

  - Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service (CVE-2025-13499)

  - BPv7 dissector crash in Wireshark 4.6.0 allows denial of service (CVE-2025-13674)

  - HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service (CVE-2025-13945)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote Windows host is prior to 4.6.8. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.6.8 advisory.

  - Pcapng file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service (CVE-2026-76929)

  - C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service     (CVE-2026-76879, CVE-2026-76886)

  - Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service (CVE-2025-13499)

  - BPv7 dissector crash in Wireshark 4.6.0 allows denial of service (CVE-2025-13674)

  - HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service (CVE-2025-13945)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the wireshark package has been released.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3501-1 advisory.

    Update to version 4.6.7:

    - CVE-2026-5299: ICMPv6 dissector crash (bsc#1263757).
    - CVE-2026-5401: AFP dissector crash (bsc#1263756).
    - CVE-2026-5402: TLS dissector crash and possible code execution (bsc#1263755).
    - CVE-2026-5403: SBC audio codec crash (bsc#1263765).
    - CVE-2026-5404: K12 RF5 file parser crash (bsc#1263766).
    - CVE-2026-5405: RDP dissector crash (bsc#1263767).
    - CVE-2026-5406: FC-SWILS dissector crash (bsc#1263754).
    - CVE-2026-5407: SMB2 dissector infinite loop (bsc#1263753).
    - CVE-2026-5408: BT-DHT dissector crash (bsc#1263752).
    - CVE-2026-5409: Monero dissector crash (bsc#1263751).
    - CVE-2026-5653: DCP-ETSI dissector crash (bsc#1263750).
    - CVE-2026-5654: AMR-NB audio codec crash (bsc#1263749).
    - CVE-2026-5655: SDP dissector crash (bsc#1263748).
    - CVE-2026-5656: Profile import crash and possible code execution (bsc#1263809).
    - CVE-2026-5657: iLBC audio codec crash (bsc#1263747).
    - CVE-2026-6519: MBIM protocol dissector infinite loop (bsc#1263746).
    - CVE-2026-6520: OpenFlow v6 protocol dissector infinite loop (bsc#1263745).
    - CVE-2026-6521: OpenFlow v5 protocol dissector infinite loops (bsc#1263744).
    - CVE-2026-6522: RPKI-Router protocol dissector infinite loop (bsc#1263743).
    - CVE-2026-6523: GNW protocol dissector infinite loop (bsc#1263742).
    - CVE-2026-6524: MySQL protocol dissector crash (bsc#1263741).
    - CVE-2026-6525: IEEE 802.11 protocol dissector crash (bsc#1263810).
    - CVE-2026-6526: RTSP protocol dissector crash (bsc#1263740).
    - CVE-2026-6527: ASN.1 PER dissector crash (bsc#1263739).
    - CVE-2026-6528: TLS protocol dissector infinite loop (bsc#1263738).
    - CVE-2026-6529: iLBC audio codec crash (bsc#1263737).
    - CVE-2026-6530: DCP-ETSI protocol dissector crash (bsc#1263736).
    - CVE-2026-6531: SANE protocol dissector infinite loop (bsc#1263735).
    - CVE-2026-6532: Kismet protocol dissector crash (bsc#1263734).
    - CVE-2026-6533: Dissection engine LZ77 decompression crash (bsc#1263733).
    - CVE-2026-6534: USB HID dissector infinite loop (bsc#1263732).
    - CVE-2026-6535: Dissection engine zlib decompression crash (bsc#1263731).
    - CVE-2026-6536: DLMS/COSEM dissector infinite loop (bsc#1263730).
    - CVE-2026-6537: ZigBee dissector crash (bsc#1263729).
    - CVE-2026-6538: BEEP dissector crash (bsc#1263728).
    - CVE-2026-6867: SMB2 protocol dissector crash (bsc#1263727).
    - CVE-2026-6868: HTTP protocol dissector crash (bsc#1263762).
    - CVE-2026-6869: WebSocket protocol dissector crash (bsc#1263726).
    - CVE-2026-6870: GSM RP protocol dissector crash (bsc#1263725).
    - CVE-2026-7375: UDS protocol dissector infinite loop (bsc#1263761).
    - CVE-2026-7376: Sharkd utility crash (bsc#1263760).
    - CVE-2026-7378: Sharkd utility crash (bsc#1263759).
    - CVE-2026-7379: Sharkd utility memory leak (bsc#1263758).
    - CVE-2026-9759: ROHC protocol dissector crash (bsc#1266670).
    - CVE-2026-15163: Denial of Service via multiple protocol dissector infinite loops (bsc#1271133).
    - CVE-2026-15164: Denial of Service vulnerability in ciscodump (bsc#1271134).
    - CVE-2026-15165: Denial of Service via TLS ECH decryptor crash (bsc#1271135).
    - CVE-2026-15166: Denial of Service via IEEE 802.11 protocol dissector crash (bsc#1271136).
    - CVE-2026-15167: Denial of Service via DBS Etherwatch file parser crash (bsc#1271137).
    - CVE-2026-15168: BLF file parser allows possible information disclosure (bsc#1271138).
    - CVE-2026-15169: Denial of Service via UMTS FP protocol dissector crash (bsc#1271139).
    - CVE-2026-15170: Denial of service via Z39.50 protocol dissector crash (bsc#1271140).
    - CVE-2026-15171: Denial of service via SSH protocol dissector crash (bsc#1271141).
    - CVE-2026-15172: Denial of service via FMP/NOTIFY protocol dissector crash (bsc#1271142).
    - CVE-2026-15173: Denial of Service via pcapng file parser crash (bsc#1271143).
    - CVE-2026-15174: Denial of Service via Catapult DCT2000 protocol dissector crash (bsc#1271144).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2203-1 advisory.

    This update for wireshark fixes the following issues

    - CVE-2026-5401: AFP dissector crash (bsc#1263756).
    - CVE-2026-5403: SBC audio codec crash (bsc#1263765).
    - CVE-2026-5404: K12 RF5 file parser crash (bsc#1263766).
    - CVE-2026-5405: RDP dissector crash (bsc#1263767).
    - CVE-2026-5406: FC-SWILS dissector crash (bsc#1263754).
    - CVE-2026-5407: SMB2 dissector infinite loop (bsc#1263753).
    - CVE-2026-5408: BT-DHT dissector crash (bsc#1263752).
    - CVE-2026-5653: DCP-ETSI dissector crash (bsc#1263750).
    - CVE-2026-5656: Profile import crash and possible code execution (bsc#1263809).
    - CVE-2026-5657: iLBC audio codec crash (bsc#1263747).
    - CVE-2026-6519: MBIM protocol dissector infinite loop (bsc#1263746).
    - CVE-2026-6520: OpenFlow v6 protocol dissector infinite loop (bsc#1263745).
    - CVE-2026-6521: OpenFlow v5 protocol dissector infinite loops (bsc#1263744).
    - CVE-2026-6522: RPKI-Router protocol dissector infinite loop (bsc#1263743).
    - CVE-2026-6523: GNW protocol dissector infinite loop (bsc#1263742).
    - CVE-2026-6526: RTSP protocol dissector crash (bsc#1263740).
    - CVE-2026-6527: ASN.1 PER dissector crash (bsc#1263739).
    - CVE-2026-6529: iLBC audio codec crash (bsc#1263737).
    - CVE-2026-6530: DCP-ETSI protocol dissector crash (bsc#1263736).
    - CVE-2026-6532: Kismet protocol dissector crash (bsc#1263734).
    - CVE-2026-6534: USB HID dissector infinite loop (bsc#1263732).
    - CVE-2026-6535: Dissection engine zlib decompression crash (bsc#1263731).
    - CVE-2026-6538: BEEP dissector crash (bsc#1263728).
    - CVE-2026-6867: SMB2 protocol dissector crash (bsc#1263727).
    - CVE-2026-6868: HTTP protocol dissector crash (bsc#1263762).
    - CVE-2026-6869: WebSocket protocol dissector crash (bsc#1263726).
    - CVE-2026-6870: GSM RP protocol dissector crash (bsc#1263725).
    - CVE-2026-7378: Sharkd utility crash (bsc#1263759).
    - CVE-2026-7379: Sharkd utility memory leak (bsc#1263758).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.6.5. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.6.5 advisory.

  - RF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of     service (CVE-2026-3203)

  - GSM RP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service     (CVE-2026-6870)

  - Monero protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service     (CVE-2026-5409)

  - BT-DHT protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service     (CVE-2026-5408)

  - FC-SWILS protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service     (CVE-2026-5406)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote Windows host is prior to 4.6.5. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.6.5 advisory.

  - RF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of     service (CVE-2026-3203)

  - GSM RP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service     (CVE-2026-6870)

  - Monero protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service     (CVE-2026-5409)

  - BT-DHT protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service     (CVE-2026-5408)

  - FC-SWILS protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service     (CVE-2026-5406)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - RTSP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 (CVE-2026-6526)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
361636	AlmaLinux 9.2 [TuxCare] Security Update: wireshark / wireshark-cli / wireshark-devel Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1786479348)	Nessus	Alma Linux Local Security Checks	Local	medium
359685	Rocky Linux 9.6 [TuxCare] Security Update: wireshark / wireshark-cli / wireshark-devel Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1785491682)	Nessus	Rocky Linux Local Security Checks	Local	high
359649	AlmaLinux 9.6 [TuxCare] Security Update: wireshark / wireshark-cli / wireshark-devel Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1785491682)	Nessus	Alma Linux Local Security Checks	Local	high
349570	Wireshark 4.6.x < 4.6.9 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	Local	critical
349567	Wireshark 4.6.x < 4.6.9 Multiple Vulnerabilities	Nessus	Windows	Local	critical
349346	Wireshark 4.6.x < 4.6.7 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	Local	high
349344	Wireshark 4.6.x < 4.6.7 Multiple Vulnerabilities	Nessus	Windows	Local	high
349077	Wireshark 4.6.x < 4.6.6 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	Local	high
349076	Wireshark 4.6.x < 4.6.6 Multiple Vulnerabilities	Nessus	Windows	Local	high
338409	Wireshark 4.6.x < 4.6.8 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	Local	critical
338408	Wireshark 4.6.x < 4.6.8 Multiple Vulnerabilities	Nessus	Windows	Local	critical
333971	Photon OS 5.0: Wireshark PHSA-2026-5.0-92-0862	Nessus	PhotonOS Local Security Checks	Local	high
333022	SUSE SLED15: libwireshark19 / libwiretap16 / libwsutil17 / wireshark / etc (SUSE-SU-2026:3501-1)	Nessus	SuSE Local Security Checks	Local	high
321831	Photon OS 4.0: Wireshark PHSA-2026-4.0-1036	Nessus	PhotonOS Local Security Checks	Local	high
318608	Photon OS 5.0: Wireshark PHSA-2026-5.0-0862	Nessus	PhotonOS Local Security Checks	Local	high
318251	SUSE SLES15 Security Update : wireshark (SUSE-SU-2026:2203-1)	Nessus	SuSE Local Security Checks	Local	high
311427	Wireshark 4.6.x < 4.6.5 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	Local	high
311426	Wireshark 4.6.x < 4.6.5 Multiple Vulnerabilities	Nessus	Windows	Local	high
311276	Linux Distros Unpatched Vulnerability : CVE-2026-6526	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-6526

medium

Tenable Plugins

medium

high

high

critical

critical

high

high

high

high

critical

critical

high

high

high

high

high

high

high

medium