CVE-2026-95389 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	8.1 HIGH	NETWORK	HIGH	NONE	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 27.48%

Affected Products (NVD)

Vendor	Product	Version
wireshark	wireshark	4.4.0 ≤ 𝑥 < 4.4.19
wireshark	wireshark	4.6.0 ≤ 𝑥 < 4.6.9

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

wireshark

bookworm	vulnerable
bookworm (security)	vulnerable
forky	4.6.9-1 fixed
sid	4.6.9-1 fixed
trixie	vulnerable
trixie (security)	4.4.19-0+deb13u1 fixed

Ubuntu Releases

Ubuntu Product

Codename

wireshark

bionic	needs-triage
focal	needs-triage
jammy	needs-triage
noble	needs-triage
resolute	needs-triage
trusty	needs-triage
xenial	needs-triage

Amazon Linux Releases

Amazon Package

Release

wireshark

Amazon Linux 2

1:2.6.2-15.amzn2.0.12

fixed

wireshark-cli

Amazon Linux 2	1:2.6.2-15.amzn2.0.12 fixed
Amazon Linux 2023	1:4.6.9-1.amzn2023.0.2 fixed

wireshark-cli-debuginfo

Amazon Linux 2023

1:4.6.9-1.amzn2023.0.2

fixed

wireshark-debuginfo

Amazon Linux 2

1:2.6.2-15.amzn2.0.12

fixed

wireshark-debugsource

Amazon Linux 2023

1:4.6.9-1.amzn2023.0.2

fixed

wireshark-devel

Amazon Linux 2	1:2.6.2-15.amzn2.0.12 fixed
Amazon Linux 2023	1:4.6.9-1.amzn2023.0.2 fixed

Known Exploits!

Common Weakness Enumeration

CWE-122 - Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

Vulnerability Media Exposure

[GERMAN] Wireshark: Mehrere Schwachstellen
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Wireshark ausnutzen, um einen Denial of Service herbeizuführen und potenziell um beliebigen Programmcode auszuführen.
Published: 2026-09-23T22:00:00+00:00

References

https://gitlab.com/wireshark/wireshark/-/work_items/21481

https://www.wireshark.org/security/wnpa-sec-2026-93.html

https://gitlab.com/wireshark/wireshark/-/work_items/21481