An update of the wireshark package has been released.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2203-1 advisory.

    This update for wireshark fixes the following issues

    - CVE-2026-5401: AFP dissector crash (bsc#1263756).
    - CVE-2026-5403: SBC audio codec crash (bsc#1263765).
    - CVE-2026-5404: K12 RF5 file parser crash (bsc#1263766).
    - CVE-2026-5405: RDP dissector crash (bsc#1263767).
    - CVE-2026-5406: FC-SWILS dissector crash (bsc#1263754).
    - CVE-2026-5407: SMB2 dissector infinite loop (bsc#1263753).
    - CVE-2026-5408: BT-DHT dissector crash (bsc#1263752).
    - CVE-2026-5653: DCP-ETSI dissector crash (bsc#1263750).
    - CVE-2026-5656: Profile import crash and possible code execution (bsc#1263809).
    - CVE-2026-5657: iLBC audio codec crash (bsc#1263747).
    - CVE-2026-6519: MBIM protocol dissector infinite loop (bsc#1263746).
    - CVE-2026-6520: OpenFlow v6 protocol dissector infinite loop (bsc#1263745).
    - CVE-2026-6521: OpenFlow v5 protocol dissector infinite loops (bsc#1263744).
    - CVE-2026-6522: RPKI-Router protocol dissector infinite loop (bsc#1263743).
    - CVE-2026-6523: GNW protocol dissector infinite loop (bsc#1263742).
    - CVE-2026-6526: RTSP protocol dissector crash (bsc#1263740).
    - CVE-2026-6527: ASN.1 PER dissector crash (bsc#1263739).
    - CVE-2026-6529: iLBC audio codec crash (bsc#1263737).
    - CVE-2026-6530: DCP-ETSI protocol dissector crash (bsc#1263736).
    - CVE-2026-6532: Kismet protocol dissector crash (bsc#1263734).
    - CVE-2026-6534: USB HID dissector infinite loop (bsc#1263732).
    - CVE-2026-6535: Dissection engine zlib decompression crash (bsc#1263731).
    - CVE-2026-6538: BEEP dissector crash (bsc#1263728).
    - CVE-2026-6867: SMB2 protocol dissector crash (bsc#1263727).
    - CVE-2026-6868: HTTP protocol dissector crash (bsc#1263762).
    - CVE-2026-6869: WebSocket protocol dissector crash (bsc#1263726).
    - CVE-2026-6870: GSM RP protocol dissector crash (bsc#1263725).
    - CVE-2026-7378: Sharkd utility crash (bsc#1263759).
    - CVE-2026-7379: Sharkd utility memory leak (bsc#1263758).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - RTSP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 (CVE-2026-6526)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of Wireshark installed on the remote Windows host is prior to 4.6.5. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.6.5 advisory.

  - RF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of     service (CVE-2026-3203)

  - GSM RP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service     (CVE-2026-6870)

  - Monero protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service     (CVE-2026-5409)

  - BT-DHT protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service     (CVE-2026-5408)

  - FC-SWILS protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service     (CVE-2026-5406)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.6.5. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.6.5 advisory.

  - RF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of     service (CVE-2026-3203)

  - GSM RP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service     (CVE-2026-6870)

  - Monero protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service     (CVE-2026-5409)

  - BT-DHT protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service     (CVE-2026-5408)

  - FC-SWILS protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service     (CVE-2026-5406)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
318608	Photon OS 5.0: Wireshark PHSA-2026-5.0-0862	Nessus	PhotonOS Local Security Checks	6/4/2026	6/27/2026	high
318251	SUSE SLES15 Security Update : wireshark (SUSE-SU-2026:2203-1)	Nessus	SuSE Local Security Checks	6/2/2026	6/9/2026	high
311276	Linux Distros Unpatched Vulnerability : CVE-2026-6526	Nessus	Misc.	4/30/2026	7/29/2026	medium
311426	Wireshark 4.6.x < 4.6.5 Multiple Vulnerabilities	Nessus	Windows	5/1/2026	5/5/2026	high
311427	Wireshark 4.6.x < 4.6.5 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	5/1/2026	5/5/2026	high
321831	Photon OS 4.0: Wireshark PHSA-2026-4.0-1036	Nessus	PhotonOS Local Security Checks	6/21/2026	6/22/2026	high

Detections

Analytics

Plugins Search

high

high

medium

high

high

high