CVE-2026-6528Disclosure(wireshark / wireshark)

LOWCVSS 5.5 · MEDIUM

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Prioritize remediation for wireshark wireshark systems immediately
  • Assume compromise if assets are exposed
  • Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

TLS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 allows denial of service

3.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-835

Priority

LOW

Exploitation

ACTIVE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • wireshark

Threat summary

  • Active exploitation appears in 1 classified signals
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Active exploitation reported across 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 2 mentions (2026-04-30); latest day: 1
  • 3 total mentions across 2 days

Affected systems

Vendors
Products
wireshark

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-04-30: 2Mentions · 2026-05-01: 1Active Exploitation · 2026-05-01: 1Technical Details · 2026-04-30: 204-3005-01
Signal classification2 categories
Disclosure
266.7%
Active Exploitation
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-04-302
Disclosure2
2026-05-011
Active Exploitation1
Full discourse3 posts
  • VulDB 🛡@vuldb
    Active Exploitation

    Some increased actor activities are shown targeting Wireshark (CVE-2026-6528) https://vuldb.com/vuln/360274/cti

    Post summary

    The tweet notes increased threat‑actor activity targeting Wireshark’s CVE‑2026‑6528, indicating possible active exploitation, but it lacks detailed technical information or evidence of specific exploits.

    0102179
    2.3K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-6528 TLS Protocol Dissector Infinite Loop Denial of Service in Wireshark 4.6.0-4.6.4 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6528

    Post summary

    The entry announces a Wireshark TLS dissector DoS vulnerability (CVE‑2026‑6528) with affected versions and a link to details, but includes no PoC, exploit, or patch information.

    0000048
    4.0K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-6528 TLS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 allows denial of service https://www.cve.org/CVERecord?id=CVE-2026-6528

    Post summary

    The post shares details of a denial‑of‑service vulnerability in Wireshark’s TLS dissector (v4.6.0‑4.6.4) that causes an infinite loop; no PoC, exploit, or patch information is provided.

    0000094
    57.3K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appwiresharkwireshark---

Explore more