The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1785337661 advisory.

  - RPCoRDMA dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via     packet injection or crafted capture file (CVE-2023-1992)

  - Multiple protocol dissector infinite loops in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allow denial of     service (CVE-2026-15163)

  - UMTS FP protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service     (CVE-2026-15169)

  - DCP-ETSI protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service     (CVE-2026-5653)

  - OpenFlow v6 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial     of service (CVE-2026-6520)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote Windows host is prior to 4.4.17. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.4.17 advisory.

  - Memory leak in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service (CVE-2026-7379)

  - Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and     possible code execution (CVE-2026-5656)

  - FiveCo RAP dissector infinite loop in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service     via packet injection or crafted capture file (CVE-2024-11595)

  - ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet     injection or crafted capture file (CVE-2024-11596)

  - ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture     file (CVE-2024-9780)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote Windows host is prior to 4.6.8. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.6.8 advisory.

  - Pcapng file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service (CVE-2026-76929)

  - C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service     (CVE-2026-76879, CVE-2026-76886)

  - Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service (CVE-2025-13499)

  - BPv7 dissector crash in Wireshark 4.6.0 allows denial of service (CVE-2025-13674)

  - HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service (CVE-2025-13945)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote Windows host is prior to 4.6.6. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.6.6 advisory.

  - Memory leak in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service (CVE-2026-7379)

  - Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and     possible code execution (CVE-2026-5656)

  - Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service (CVE-2025-13499)

  - BPv7 dissector crash in Wireshark 4.6.0 allows denial of service (CVE-2025-13674)

  - HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service (CVE-2025-13945)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - DCP-ETSI protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service     (CVE-2026-5653)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2203-1 advisory.

    This update for wireshark fixes the following issues

    - CVE-2026-5401: AFP dissector crash (bsc#1263756).
    - CVE-2026-5403: SBC audio codec crash (bsc#1263765).
    - CVE-2026-5404: K12 RF5 file parser crash (bsc#1263766).
    - CVE-2026-5405: RDP dissector crash (bsc#1263767).
    - CVE-2026-5406: FC-SWILS dissector crash (bsc#1263754).
    - CVE-2026-5407: SMB2 dissector infinite loop (bsc#1263753).
    - CVE-2026-5408: BT-DHT dissector crash (bsc#1263752).
    - CVE-2026-5653: DCP-ETSI dissector crash (bsc#1263750).
    - CVE-2026-5656: Profile import crash and possible code execution (bsc#1263809).
    - CVE-2026-5657: iLBC audio codec crash (bsc#1263747).
    - CVE-2026-6519: MBIM protocol dissector infinite loop (bsc#1263746).
    - CVE-2026-6520: OpenFlow v6 protocol dissector infinite loop (bsc#1263745).
    - CVE-2026-6521: OpenFlow v5 protocol dissector infinite loops (bsc#1263744).
    - CVE-2026-6522: RPKI-Router protocol dissector infinite loop (bsc#1263743).
    - CVE-2026-6523: GNW protocol dissector infinite loop (bsc#1263742).
    - CVE-2026-6526: RTSP protocol dissector crash (bsc#1263740).
    - CVE-2026-6527: ASN.1 PER dissector crash (bsc#1263739).
    - CVE-2026-6529: iLBC audio codec crash (bsc#1263737).
    - CVE-2026-6530: DCP-ETSI protocol dissector crash (bsc#1263736).
    - CVE-2026-6532: Kismet protocol dissector crash (bsc#1263734).
    - CVE-2026-6534: USB HID dissector infinite loop (bsc#1263732).
    - CVE-2026-6535: Dissection engine zlib decompression crash (bsc#1263731).
    - CVE-2026-6538: BEEP dissector crash (bsc#1263728).
    - CVE-2026-6867: SMB2 protocol dissector crash (bsc#1263727).
    - CVE-2026-6868: HTTP protocol dissector crash (bsc#1263762).
    - CVE-2026-6869: WebSocket protocol dissector crash (bsc#1263726).
    - CVE-2026-6870: GSM RP protocol dissector crash (bsc#1263725).
    - CVE-2026-7378: Sharkd utility crash (bsc#1263759).
    - CVE-2026-7379: Sharkd utility memory leak (bsc#1263758).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote Windows host is prior to 4.4.16. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.4.16 advisory.

  - Memory leak in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service (CVE-2026-7379)

  - Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and     possible code execution (CVE-2026-5656)

  - FiveCo RAP dissector infinite loop in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service     via packet injection or crafted capture file (CVE-2024-11595)

  - ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet     injection or crafted capture file (CVE-2024-11596)

  - ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture     file (CVE-2024-9780)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote Windows host is prior to 4.4.15. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.4.15 advisory.

  - Memory leak in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service (CVE-2026-7379)

  - Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and     possible code execution (CVE-2026-5656)

  - FiveCo RAP dissector infinite loop in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service     via packet injection or crafted capture file (CVE-2024-11595)

  - ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet     injection or crafted capture file (CVE-2024-11596)

  - ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture     file (CVE-2024-9780)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.4.18. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.4.18 advisory.

  - Pcapng file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service (CVE-2026-76929)

  - C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service     (CVE-2026-76879, CVE-2026-76886)

  - FiveCo RAP dissector infinite loop in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service     via packet injection or crafted capture file (CVE-2024-11595)

  - ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet     injection or crafted capture file (CVE-2024-11596)

  - ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture     file (CVE-2024-9780)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.6.8. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.6.8 advisory.

  - Pcapng file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service (CVE-2026-76929)

  - C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service     (CVE-2026-76879, CVE-2026-76886)

  - Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service (CVE-2025-13499)

  - BPv7 dissector crash in Wireshark 4.6.0 allows denial of service (CVE-2025-13674)

  - HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service (CVE-2025-13945)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.6.6. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.6.6 advisory.

  - Memory leak in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service (CVE-2026-7379)

  - Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and     possible code execution (CVE-2026-5656)

  - Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service (CVE-2025-13499)

  - BPv7 dissector crash in Wireshark 4.6.0 allows denial of service (CVE-2025-13674)

  - HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service (CVE-2025-13945)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.6.7. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.6.7 advisory.

  - Memory leak in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service (CVE-2026-7379)

  - Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and     possible code execution (CVE-2026-5656)

  - Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service (CVE-2025-13499)

  - BPv7 dissector crash in Wireshark 4.6.0 allows denial of service (CVE-2025-13674)

  - HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service (CVE-2025-13945)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
353046	AlmaLinux 9.2 [TuxCare] Security Update: wireshark / wireshark-cli / wireshark-devel Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1785337661)	Nessus	Alma Linux Local Security Checks	9/30/2026	10/1/2026	high
349193	Wireshark 4.4.x < 4.4.17 Multiple Vulnerabilities	Nessus	Windows	9/23/2026	9/24/2026	high
338408	Wireshark 4.6.x < 4.6.8 Multiple Vulnerabilities	Nessus	Windows	8/20/2026	9/24/2026	critical
349076	Wireshark 4.6.x < 4.6.6 Multiple Vulnerabilities	Nessus	Windows	9/22/2026	9/23/2026	high
311632	Linux Distros Unpatched Vulnerability : CVE-2026-5653	Nessus	Misc.	5/2/2026	9/2/2026	high
318251	SUSE SLES15 Security Update : wireshark (SUSE-SU-2026:2203-1)	Nessus	SuSE Local Security Checks	6/2/2026	6/9/2026	high
349345	Wireshark 4.4.x < 4.4.16 Multiple Vulnerabilities	Nessus	Windows	9/23/2026	9/24/2026	high
311436	Wireshark 4.4.x < 4.4.15 Multiple Vulnerabilities	Nessus	Windows	5/1/2026	9/22/2026	high
338411	Wireshark 4.4.x < 4.4.18 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	8/20/2026	9/24/2026	critical
338409	Wireshark 4.6.x < 4.6.8 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	8/20/2026	9/24/2026	critical
349077	Wireshark 4.6.x < 4.6.6 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	9/22/2026	9/23/2026	high
349346	Wireshark 4.6.x < 4.6.7 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	9/23/2026	9/24/2026	high

Detections

Analytics

Plugins Search

high

high

critical

high

high

high

high

high

critical

critical

high

high