The version of Wireshark installed on the remote Windows host is prior to 4.4.17. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.4.17 advisory.

  - Memory leak in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service (CVE-2026-7379)

  - Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and     possible code execution (CVE-2026-5656)

  - FiveCo RAP dissector infinite loop in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service     via packet injection or crafted capture file (CVE-2024-11595)

  - ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet     injection or crafted capture file (CVE-2024-11596)

  - ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture     file (CVE-2024-9780)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote Windows host is prior to 4.6.8. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.6.8 advisory.

  - Pcapng file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service (CVE-2026-76929)

  - C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service     (CVE-2026-76879, CVE-2026-76886)

  - Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service (CVE-2025-13499)

  - BPv7 dissector crash in Wireshark 4.6.0 allows denial of service (CVE-2025-13674)

  - HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service (CVE-2025-13945)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote Windows host is prior to 4.6.6. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.6.6 advisory.

  - Memory leak in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service (CVE-2026-7379)

  - Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and     possible code execution (CVE-2026-5656)

  - Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service (CVE-2025-13499)

  - BPv7 dissector crash in Wireshark 4.6.0 allows denial of service (CVE-2025-13674)

  - HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service (CVE-2025-13945)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - WebSocket protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of     service (CVE-2026-6869)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.4.15. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.4.15 advisory.

  - Memory leak in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service (CVE-2026-7379)

  - Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and     possible code execution (CVE-2026-5656)

  - FiveCo RAP dissector infinite loop in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service     via packet injection or crafted capture file (CVE-2024-11595)

  - ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet     injection or crafted capture file (CVE-2024-11596)

  - ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture     file (CVE-2024-9780)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.4.17. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.4.17 advisory.

  - Memory leak in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service (CVE-2026-7379)

  - Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and     possible code execution (CVE-2026-5656)

  - FiveCo RAP dissector infinite loop in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service     via packet injection or crafted capture file (CVE-2024-11595)

  - ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet     injection or crafted capture file (CVE-2024-11596)

  - ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture     file (CVE-2024-9780)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote Windows host is prior to 4.4.19. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.4.19 advisory.

  - C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service     (CVE-2026-76879, CVE-2026-76886)

  - FiveCo RAP dissector infinite loop in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service     via packet injection or crafted capture file (CVE-2024-11595)

  - ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet     injection or crafted capture file (CVE-2024-11596)

  - ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture     file (CVE-2024-9780)

  - AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2.7 allows denial of     service via packet injection or crafted capture file (CVE-2024-9781)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.4.19. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.4.19 advisory.

  - C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service     (CVE-2026-76879, CVE-2026-76886)

  - FiveCo RAP dissector infinite loop in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service     via packet injection or crafted capture file (CVE-2024-11595)

  - ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet     injection or crafted capture file (CVE-2024-11596)

  - ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture     file (CVE-2024-9780)

  - AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2.7 allows denial of     service via packet injection or crafted capture file (CVE-2024-9781)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6249 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6249-1                   security@debian.org     https://www.debian.org/security/                       Moritz Muehlenhoff     May 06, 2026                          https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : wireshark     CVE ID         : CVE-2026-5299 CVE-2026-5401 CVE-2026-5403 CVE-2026-5404                      CVE-2026-5405 CVE-2026-5406 CVE-2026-5407 CVE-2026-5408                      CVE-2026-5409 CVE-2026-5653 CVE-2026-5654 CVE-2026-5656                      CVE-2026-5657 CVE-2026-6519 CVE-2026-6520 CVE-2026-6521                      CVE-2026-6522 CVE-2026-6523 CVE-2026-6524 CVE-2026-6527                      CVE-2026-6529 CVE-2026-6530 CVE-2026-6531 CVE-2026-6532                      CVE-2026-6533 CVE-2026-6534 CVE-2026-6535 CVE-2026-6537                      CVE-2026-6538 CVE-2026-6867 CVE-2026-6868 CVE-2026-6869                      CVE-2026-6870 CVE-2026-7375 CVE-2026-7376 CVE-2026-7378                      CVE-2026-7379

    Multiple vulnerabilities have been discocvered in Wireshark, a network     protocol analyzer which could result in denial of service or the     execution of arbitrary code.

    For the oldstable distribution (bookworm), a subset of these problems     have been fixed in version 4.0.17-0+deb12u3.

    For the stable distribution (trixie), these problems have been fixed in     version 4.4.15-0+deb13u1.

    We recommend that you upgrade your wireshark packages.

    For the detailed security status of wireshark please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/wireshark

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20685-1 advisory.

    This update for wireshark fixes the following issues

    - CVE-2026-3201: missing limit checks in USB HID protocol dissector's `parse_report_descriptor` function     can lead to       memory exhaustion (bsc#1258907).
    - CVE-2026-3203: missing length checks in the RF4CE Profile protocol dissector can lead to illegal memory     access and       crash (bsc#1258909).
    - CVE-2026-5299: ICMPv6 dissector crash (bsc#1263757).
    - CVE-2026-5401: AFP dissector crash (bsc#1263756).
    - CVE-2026-5403: SBC audio codec crash (bsc#1263765).
    - CVE-2026-5404: K12 RF5 file parser crash (bsc#1263766).
    - CVE-2026-5405: RDP dissector crash (bsc#1263767).
    - CVE-2026-5406: FC-SWILS dissector crash (bsc#1263754).
    - CVE-2026-5407: SMB2 dissector infinite loop (bsc#1263753).
    - CVE-2026-5408: BT-DHT dissector crash (bsc#1263752).
    - CVE-2026-5409: Monero dissector crash (bsc#1263751).
    - CVE-2026-5653: DCP-ETSI dissector crash (bsc#1263750).
    - CVE-2026-5654: AMR-NB audio codec crash (bsc#1263749).
    - CVE-2026-5656: Profile import crash and possible code execution (bsc#1263809).
    - CVE-2026-5657: iLBC audio codec crash (bsc#1263747).
    - CVE-2026-6519: MBIM protocol dissector infinite loop (bsc#1263746).
    - CVE-2026-6520: OpenFlow v6 protocol dissector infinite loop (bsc#1263745).
    - CVE-2026-6521: OpenFlow v5 protocol dissector infinite loops (bsc#1263744).
    - CVE-2026-6522: RPKI-Router protocol dissector infinite loop (bsc#1263743).
    - CVE-2026-6523: GNW protocol dissector infinite loop (bsc#1263742).
    - CVE-2026-6524: MySQL protocol dissector crash (bsc#1263741).
    - CVE-2026-6527: ASN.1 PER dissector crash (bsc#1263739).
    - CVE-2026-6529: iLBC audio codec crash (bsc#1263737).
    - CVE-2026-6530: DCP-ETSI protocol dissector crash (bsc#1263736).
    - CVE-2026-6531: SANE protocol dissector infinite loop (bsc#1263735).
    - CVE-2026-6532: Kismet protocol dissector crash (bsc#1263734).
    - CVE-2026-6533: Dissection engine LZ77 decompression crash (bsc#1263733).
    - CVE-2026-6534: USB HID dissector infinite loop (bsc#1263732).
    - CVE-2026-6535: Dissection engine zlib decompression crash (bsc#1263731).
    - CVE-2026-6537: ZigBee dissector crash (bsc#1263729).
    - CVE-2026-6538: BEEP dissector crash (bsc#1263728).
    - CVE-2026-6868: HTTP protocol dissector crash (bsc#1263762).
    - CVE-2026-6869: WebSocket protocol dissector crash (bsc#1263726).

    Changes for wireshark:

    - Updated to 4.4.15

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
349193	Wireshark 4.4.x < 4.4.17 Multiple Vulnerabilities	Nessus	Windows	9/23/2026	9/24/2026	high
338408	Wireshark 4.6.x < 4.6.8 Multiple Vulnerabilities	Nessus	Windows	8/20/2026	9/24/2026	critical
349076	Wireshark 4.6.x < 4.6.6 Multiple Vulnerabilities	Nessus	Windows	9/22/2026	9/23/2026	high
311239	Linux Distros Unpatched Vulnerability : CVE-2026-6869	Nessus	Misc.	4/30/2026	11/6/2026	medium
311437	Wireshark 4.4.x < 4.4.15 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	5/1/2026	9/22/2026	high
349192	Wireshark 4.4.x < 4.4.17 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	9/23/2026	9/24/2026	high
349568	Wireshark 4.4.x < 4.4.19 Multiple Vulnerabilities	Nessus	Windows	9/23/2026	10/8/2026	critical
349569	Wireshark 4.4.x < 4.4.19 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	9/23/2026	10/8/2026	critical
313009	Debian dsa-6249 : libwireshark-data - security update	Nessus	Debian Local Security Checks	5/7/2026	5/8/2026	high
313625	openSUSE 16 Security Update : wireshark (openSUSE-SU-2026:20685-1)	Nessus	SuSE Local Security Checks	5/10/2026	5/11/2026	high

Detections

Analytics

Plugins Search

high

critical

high

medium

high

high

critical

critical

high

high