VulnSocial

CVE-2026-3202Patch(wireshark / wireshark)

LOWCVSS 7.5 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch wireshark wireshark systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

NTS-KE protocol dissector crash in Wireshark 4.6.0 to 4.6.3 allows denial of service

wireshark CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-476

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • wireshark

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 3 signals
  • Disclosure: 1 classified signal
  • Peaked at 2 mentions on most recent observed day (2026-02-26)
  • 3 total mentions across 2 days

Affected systems

Vendors
wireshark
Products
wireshark

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-02-25: 1Mentions · 2026-02-26: 2Patch / Workaround · 2026-02-26: 2Technical Details · 2026-02-25: 1Technical Details · 2026-02-26: 202-2502-26
Signal classification2 categories
Patch
266.7%
Disclosure
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-02-251
Disclosure1
2026-02-262
Patch2
Full discourse3 posts
  • ThreatSynop@ThreatSynop
    Patch

    🚨 Wireshark 4.6.4 ships security fixes for multiple dissector CVEs and restores plugin compatibility Wireshark 4.6.4 fixes three security issues (USB HID memory exhaustion CVE-2026-3201, NTS-KE crash CVE-2026-3202, RF4CE Profile crash CVE-2026-3203) and includes additional stability bug fixes, while also restoring compatibility for plugins impacted by the 4.6.1 API/ABI change. 🎯 Target: Global/Blue Team & DFIR #️⃣ Category: #Vulnerability #BlueTeam 🔗 URL: https://www.helpnetsecurity.com/2026/02/26/wireshark-4-6-4-released/

    Post summary

    Wireshark 4.6.4 releases a patch that fixes three CVEs—USB HID memory exhaustion, NTS‑KE crash, and RF4CE Profile crash—while restoring plugin compatibility.

    0101087
    221 followersView on X
  • ThreatSynop@ThreatSynop
    Patch

    🚨 Wireshark 4.6.4 Patches 3 CVEs Causing Dissector DoS/Crashes (USB HID, NTS-KE, RF4CE) Wireshark 4.6.4 fixes three vulnerabilities—CVE-2026-3201 (USB HID memory exhaustion), CVE-2026-3202 (NTS-KE NULL deref crash), and CVE-2026-3203 (RF4CE dissector crash)—that can be triggered by malformed traffic/pcaps to disrupt analysis workflows. 🎯 Target: Global/Network & Security Teams #️⃣ Category: #Vulnerability #BlueTeam 🔗 URL: https://cyberpress.org/wireshark-4-6-4-released-with-patches-for-multiple-security-vulnerabilities/

    Post summary

    Wireshark 4.6.4 releases patches for three CVEs that cause DoS/crashes, detailing each vulnerability type and the affected components.

    0001041
    220 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-3202 NTS-KE protocol dissector crash in Wireshark 4.6.0 to 4.6.3 allows denial of service https://www.cve.org/CVERecord?id=CVE-2026-3202

    Post summary

    The CVE details a crash in Wireshark's NTS-KE protocol dissector that can cause a denial of service in versions 4.6.0 to 4.6.3.

    0000088
    56.6K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appwiresharkwireshark---

Explore more

Back to dashboardwireshark CVEswireshark vulnerabilities