CVE-2026-5405Disclosure(wireshark / wireshark)

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

RDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution

wireshark CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

https://gitlab.com/wireshark/wireshark/-/issues/21105

Vendor / third-party advisories

https://www.wireshark.org/security/wnpa-sec-2026-17.html

Other references

Weakness type (CWE)

CWE-122CWE-787

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

wireshark

Threat summary

4 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 4 signals
Disclosure: 4 classified signals
Peaked 1d ago at 3 mentions (2026-05-01); latest day: 1
4 total mentions across 2 days

Affected systems

Vendors

wireshark

Products

wireshark

Deep dive

Activity timeline4 mentions / 2d

Signal classification1 categories

Disclosure

4100.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-05-01	3	Disclosure3
2026-05-30	1	Disclosure1

Full discourse4 posts

Lyrie.ai@lyrie_ai134d
Disclosure
Four dissectors are vulnerable to code execution via malformed packet injection: TLS Dissector (CVE-2026-5402) — Crash with possible code execution when parsing adversarially crafted TLS traffic RDP Dissector (CVE-2026-5405) — Remote Desktop Protocol packet parsing…
Post summary
The note details new CVE vulnerabilities in network packet dissectors that can cause crashes and potential code execution when processing crafted traffic.
1000041
232 followersView on X
CVE@CVEnew163d
Disclosure
CVE-2026-5405 RDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution https://www.cve.org/CVERecord?id=CVE-2026-5405
Post summary
This announcement discloses CVE‑2026‑5405, a RDP protocol dissector crash affecting Wireshark 4.6.0‑4.6.4 and 4.4.0‑4.4.14 that can lead to denial of service and potential code execution.
00010184
57.4K followersView on X
CVEarity@CVEarity163d
Disclosure
⚡ New CVE Alert: CVE-2026-5405 📊 Severity: 7.8 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-5405 #CVE-2026-5405 #CVE #High #CyberSecurity #InfoSec https://t.co/2fO8vDT7nb
Post summary
A new CVE (CVE-2026-5405) is announced with a 7.8 severity score and high risk level, affecting multiple unspecified products. No PoC, exploit, or patch information is provided.
1000040
151 followersView on X
Infoflowcloud@infoflowcloud163d
Disclosure
🚨*CVE* CVE-2026-5405 RDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution https://www.cve.org/CVERecord?id=CVE-2026-5405 ----- Traducción: CVE-2026-5405: fallo del analizador del protocolo RDP en W… http://infoflow.cloud`
Post summary
CVE-2026-5405 describes a RDP protocol dissector crash in Wireshark that can cause denial of service and potential code execution, with no PoC, exploit code, or patch information provided.
0000047
75 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	wireshark	wireshark	-	-	-

Explore more

Back to dashboard wireshark CVEs wireshark vulnerabilities

What researchers are saying

CVE-2026-5405

Lyrie.ai[verified]@lyrie_aiDisclosure

The note details new CVE vulnerabilities in network packet dissectors that can cause crashes and potential code execution when processing crafted traffic.

CVE@CVEnewDisclosure

This announcement discloses CVE‑2026‑5405, a RDP protocol dissector crash affecting Wireshark 4.6.0‑4.6.4 and 4.4.0‑4.4.14 that can lead to denial of service and potential code execution.

CVEarity@CVEarityDisclosure

A new CVE (CVE-2026-5405) is announced with a 7.8 severity score and high risk level, affecting multiple unspecified products. No PoC, exploit, or patch information is provided.

Infoflowcloud@infoflowcloudDisclosure

CVE-2026-5405 describes a RDP protocol dissector crash in Wireshark that can cause denial of service and potential code execution, with no PoC, exploit code, or patch information provided.