CVE-2026-5407

A flaw was found in Wireshark, a network protocol analyzer. An attacker could exploit this vulnerability by providing a specially crafted network capture file containing malicious SMB2 protocol data. This could trigger an infinite loop in Wireshark's SMB2 analysis component, leading to a denial of service (DoS) where the application becomes unresponsive.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, users should exercise caution and avoid opening untrusted or suspicious network capture files with Wireshark. Running Wireshark within a sandboxed environment, such as a container or a virtual machine, can further limit the potential impact of processing malicious data.