high7.8
CVE-2026-5405
RDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution
Impact
RDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wireshark | Wireshark | from 4.4.0 before 4.4.15 from 4.6.0 before 4.6.5 |
Weakness classification
References
- NVD record
- CVE.org record
- https://gitlab.com/wireshark/wireshark/-/issues/21105
- https://www.wireshark.org/security/wnpa-sec-2026-17.html
- https://access.redhat.com/errata/RHSA-2026:20600
- https://access.redhat.com/errata/RHSA-2026:26182
- https://access.redhat.com/security/cve/CVE-2026-5405
- https://bugzilla.redhat.com/show_bug.cgi?id=2464273
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5405.json