VulnSocial

CVE-2026-15168Disclosure(wireshark / wireshark)

LOWCVSS 3.3 · LOW

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Patch wireshark wireshark systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

BLF file parser in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows possible information disclosure

wireshark CVEsBack to dashboard
2.0/ 10 priority

Sources & remediation

Exploit / PoC references
Vendor / third-party advisories
Weakness type (CWE)
CWE-457

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • wireshark

Threat summary

  • Public PoC is present in monitored signal
  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
wireshark
Products
wireshark

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-07-16: 1PoC Mentioned / Linked · 2026-07-16: 1Patch / Workaround · 2026-07-16: 1Technical Details · 2026-07-16: 107-16
Signal classification1 categories
Disclosure
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • CyStack@CyStackSecurity
    Disclosure

    CVE-2026-15167: Vulnerability in Wireshark's DBS Etherwatch file parser, the world's most popular network protocol analyzer. Open a malicious capture file. Wireshark crashes instantly. Plus CVE-2026-15168: information leak via BLF parser. Patched in 4.6.7 / 4.4.17. Found by CyStack researchers. Details at http://bit.ly/cystack-disclosures #CyStack #CyberSecurity #Vulnerability #Wireshark #NetworkSecurity #InfoSec

    Post summary

    CyberSecurity researchers CyStack disclosed two Wireshark CVEs: CVE-2026-15167 causes a crash via the DBS Etherwatch file parser, while CVE-2026-15168 leaks information through the BLF parser and has been patched in versions 4.6.7/4.4.17.

    00010110
    3.7K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appwiresharkwireshark---

Explore more

Back to dashboardwireshark CVEswireshark vulnerabilities