CVE-2026-6537

A flaw was found in Wireshark. A remote attacker could exploit a vulnerability in the ZigBee protocol dissector by crafting a malicious packet. This could lead to a crash of the Wireshark application, resulting in a denial of service (DoS) for the user.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, users can disable the ZigBee protocol dissector in Wireshark. This can be achieved by navigating to Analyze > Enabled Protocols... and unchecking the 'ZigBee' protocol. Alternatively, users should avoid opening untrusted capture files or analyzing untrusted live network traffic with Wireshark.