CVE-2026-5656

wireshark: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wireshark

Loading…

Severity

Important

Red Hat Product Security

7.8

CVSS 3.1

Review impact separately from score.

Published · May 1, 2026

Updated · November 5, 2026

Description

A flaw was found in Wireshark. A path traversal can occur when a malformed configuration profile is imported, resulting in a denial of service or potentially in code execution.

Statement

This issue will cause a crash in Wireshark and potentially result in code execution. This flaw can only be exploited when a malformed configuration profile is imported. Due to these reasons, this vulnerability has been rated with an important severity.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

To mitigate this flaw, do not import configuration profiles from untrusted or unverified sources.

CVSS / CWE

CVSS 3.1 · 7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-22 · Improper Limitation of a Pathname to a Restricted Directory