{"schema_version":"1","data":[{"id":21435,"advisory_id":"3091a4e1-dbc8-4749-924c-cf6cb5ec7410","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-96423","source_published_at":"2026-09-29T09:30:38.019+00:00","published_at":"2026-10-25T05:45:06.360544+00:00","extraction_method":"structured","technologies":["core-cve","wireshark"],"cve_ids":["CVE-2026-96423"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Heap-based Buffer Overflow in Wireshark","summary":"X11 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service","evidence":"cve:CVE-2026-96423","products":[{"name":{"value":"Wireshark","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-96423","aliases":["CVE-2026-96423"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://gitlab.com/wireshark/wireshark","vendor":"Wireshark Foundation","product":"Wireshark","versions":[{"status":"affected","version":"4.6.0","lessThan":"4.6.9","versionType":"semver"},{"status":"affected","version":"4.4.0","lessThan":"4.4.19","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-10-14T03:57:43.076Z","provider":"cve","references":["https://www.wireshark.org/security/wnpa-sec-2026-108.html","https://gitlab.com/wireshark/wireshark/-/work_items/21563"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-96423","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-09T00:00:00+00:00"}}}],"references":[{"url":"https://gitlab.com/wireshark/wireshark/-/work_items/21563","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-14T03:57:43.076Z"}}],"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-09-29T09:30:38.019Z"}}},"related_cves":[{"value":"CVE-2026-96423","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"context_update":false},{"id":3799,"advisory_id":"94b8d7d8-66eb-48e7-9e4f-94374ed989e6","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-95395","source_published_at":"2026-09-29T09:33:18.011+00:00","published_at":"2026-10-24T21:40:52.227609+00:00","extraction_method":"structured","technologies":["core-cve","wireshark"],"cve_ids":["CVE-2026-95395"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Missing Release of Memory after Effective Lifetime in Wireshark","summary":"IEEE C37.118 Synchrophasor protocol dissector memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service","evidence":"cve:CVE-2026-95395","products":[{"name":{"value":"Wireshark","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-95395","aliases":["CVE-2026-95395"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://gitlab.com/wireshark/wireshark","vendor":"Wireshark Foundation","product":"Wireshark","versions":[{"status":"affected","version":"4.6.0","lessThan":"4.6.9","versionType":"semver"},{"status":"affected","version":"4.4.0","lessThan":"4.4.19","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-09-29T15:51:43.949Z","provider":"cve","references":["https://www.wireshark.org/security/wnpa-sec-2026-96.html","https://gitlab.com/wireshark/wireshark/-/work_items/21492"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-95395","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-29T15:51:18.893724Z"}}}],"references":[{"url":"https://gitlab.com/wireshark/wireshark/-/work_items/21492","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T15:51:43.949Z"}}],"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-09-29T09:33:18.011Z"}}},"related_cves":[{"value":"CVE-2026-95395","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"context_update":false},{"id":3798,"advisory_id":"bb6afdae-2991-40d5-8b95-bf90bd9416aa","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-95394","source_published_at":"2026-09-29T09:33:08.011+00:00","published_at":"2026-10-24T21:40:51.651402+00:00","extraction_method":"structured","technologies":["core-cve","wireshark"],"cve_ids":["CVE-2026-95394"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Unchecked Input for Loop Condition in Wireshark","summary":"Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service","evidence":"cve:CVE-2026-95394","products":[{"name":{"value":"Wireshark","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-95394","aliases":["CVE-2026-95394"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.7,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://gitlab.com/wireshark/wireshark","vendor":"Wireshark Foundation","product":"Wireshark","versions":[{"status":"affected","version":"4.6.0","lessThan":"4.6.9","versionType":"semver"},{"status":"affected","version":"4.4.0","lessThan":"4.4.19","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-09-29T15:49:42.939Z","provider":"cve","references":["https://www.wireshark.org/security/wnpa-sec-2026-98.html","https://gitlab.com/wireshark/wireshark/-/work_items/21523"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-95394","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-29T15:48:01.196383Z"}}}],"references":[{"url":"https://gitlab.com/wireshark/wireshark/-/work_items/21523","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T15:49:42.939Z"}}],"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-09-29T09:33:08.011Z"}}},"related_cves":[{"value":"CVE-2026-95394","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"context_update":false},{"id":3797,"advisory_id":"d72007bd-91cf-4777-bafc-b617a6fc5cd5","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-95387","source_published_at":"2026-09-29T09:33:13.021+00:00","published_at":"2026-10-24T21:40:51.056239+00:00","extraction_method":"structured","technologies":["core-cve","wireshark"],"cve_ids":["CVE-2026-95387"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Heap-based Buffer Overflow in Wireshark","summary":"SPDY protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service","evidence":"cve:CVE-2026-95387","products":[{"name":{"value":"Wireshark","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-95387","aliases":["CVE-2026-95387"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.1,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://gitlab.com/wireshark/wireshark","vendor":"Wireshark Foundation","product":"Wireshark","versions":[{"status":"affected","version":"4.6.0","lessThan":"4.6.9","versionType":"semver"},{"status":"affected","version":"4.4.0","lessThan":"4.4.19","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-09-29T15:50:45.375Z","provider":"cve","references":["https://www.wireshark.org/security/wnpa-sec-2026-97.html","https://gitlab.com/wireshark/wireshark/-/work_items/21487"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-95387","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-29T15:50:16.910979Z"}}}],"references":[{"url":"https://gitlab.com/wireshark/wireshark/-/work_items/21487","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T15:50:45.375Z"}}],"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-09-29T09:33:13.021Z"}}},"related_cves":[{"value":"CVE-2026-95387","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"context_update":false},{"id":3790,"advisory_id":"7976f314-bd29-4e95-bf31-572cdccdb70d","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-96422","source_published_at":"2026-09-29T09:31:08.02+00:00","published_at":"2026-10-24T21:40:46.989908+00:00","extraction_method":"structured","technologies":["core-cve","wireshark"],"cve_ids":["CVE-2026-96422"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Reachable Assertion in Wireshark","summary":"Frame protocol metadissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service","evidence":"cve:CVE-2026-96422","products":[{"name":{"value":"Wireshark","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-96422","aliases":["CVE-2026-96422"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://gitlab.com/wireshark/wireshark","vendor":"Wireshark Foundation","product":"Wireshark","versions":[{"status":"affected","version":"4.6.0","lessThan":"4.6.9","versionType":"semver"},{"status":"affected","version":"4.4.0","lessThan":"4.4.19","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-09-29T15:43:57.112Z","provider":"cve","references":["https://www.wireshark.org/security/wnpa-sec-2026-102.html","https://gitlab.com/wireshark/wireshark/-/work_items/21525"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-96422","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-29T15:43:28.054248Z"}}}],"references":[{"url":"https://gitlab.com/wireshark/wireshark/-/work_items/21525","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T15:43:57.112Z"}}],"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-09-29T09:31:08.020Z"}}},"related_cves":[{"value":"CVE-2026-96422","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"context_update":false},{"id":3789,"advisory_id":"92840a89-2fef-4f48-b866-a1318d119b1f","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-96421","source_published_at":"2026-09-29T09:31:03.02+00:00","published_at":"2026-10-24T21:40:46.402337+00:00","extraction_method":"structured","technologies":["core-cve","wireshark"],"cve_ids":["CVE-2026-96421"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Improperly Controlled Sequential Memory Allocation in Wireshark","summary":"USB HID protocol dissector infinite loop and memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service","evidence":"cve:CVE-2026-96421","products":[{"name":{"value":"Wireshark","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-96421","aliases":["CVE-2026-96421"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://gitlab.com/wireshark/wireshark","vendor":"Wireshark Foundation","product":"Wireshark","versions":[{"status":"affected","version":"4.6.0","lessThan":"4.6.9","versionType":"semver"},{"status":"affected","version":"4.4.0","lessThan":"4.4.19","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-09-29T15:42:23.522Z","provider":"cve","references":["https://www.wireshark.org/security/wnpa-sec-2026-103.html","https://gitlab.com/wireshark/wireshark/-/work_items/21566"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-96421","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-29T15:41:50.873183Z"}}}],"references":[{"url":"https://gitlab.com/wireshark/wireshark/-/work_items/21566","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T15:42:23.522Z"}}],"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-09-29T09:31:03.020Z"}}},"related_cves":[{"value":"CVE-2026-96421","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"context_update":false},{"id":3788,"advisory_id":"a8be9c8f-60d9-4799-8349-57838fb9bbe1","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-96417","source_published_at":"2026-09-29T09:30:58.021+00:00","published_at":"2026-10-24T21:40:45.832302+00:00","extraction_method":"structured","technologies":["core-cve","wireshark"],"cve_ids":["CVE-2026-96417"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Heap-based Buffer Overflow in Wireshark","summary":"RF4CE protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service","evidence":"cve:CVE-2026-96417","products":[{"name":{"value":"Wireshark","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-96417","aliases":["CVE-2026-96417"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://gitlab.com/wireshark/wireshark","vendor":"Wireshark Foundation","product":"Wireshark","versions":[{"status":"affected","version":"4.6.0","lessThan":"4.6.9","versionType":"semver"},{"status":"affected","version":"4.4.0","lessThan":"4.4.19","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-09-29T15:41:14.438Z","provider":"cve","references":["https://www.wireshark.org/security/wnpa-sec-2026-104.html","https://gitlab.com/wireshark/wireshark/-/work_items/21574"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-96417","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-29T15:38:16.540898Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T15:41:14.438Z"}}],"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-09-29T09:30:58.021Z"}}},"related_cves":[{"value":"CVE-2026-96417","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"context_update":false},{"id":3787,"advisory_id":"bacc47ef-8bf6-4153-b4df-ca54b49da345","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-95393","source_published_at":"2026-09-29T09:33:03.014+00:00","published_at":"2026-10-24T21:40:45.270681+00:00","extraction_method":"structured","technologies":["core-cve","wireshark"],"cve_ids":["CVE-2026-95393"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Heap-based Buffer Overflow in Wireshark","summary":"CSN.1 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service","evidence":"cve:CVE-2026-95393","products":[{"name":{"value":"Wireshark","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-95393","aliases":["CVE-2026-95393"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.7,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://gitlab.com/wireshark/wireshark","vendor":"Wireshark Foundation","product":"Wireshark","versions":[{"status":"affected","version":"4.6.0","lessThan":"4.6.9","versionType":"semver"},{"status":"affected","version":"4.4.0","lessThan":"4.4.19","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-09-29T15:47:24.905Z","provider":"cve","references":["https://www.wireshark.org/security/wnpa-sec-2026-99.html","https://gitlab.com/wireshark/wireshark/-/work_items/21510"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-95393","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-29T15:46:53.215496Z"}}}],"references":[{"url":"https://gitlab.com/wireshark/wireshark/-/work_items/21510","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T15:47:24.905Z"}}],"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-09-29T09:33:03.014Z"}}},"related_cves":[{"value":"CVE-2026-95393","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"context_update":false},{"id":3786,"advisory_id":"5d3c1393-c853-4e57-89cf-cd14ac421183","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-95392","source_published_at":"2026-09-29T09:32:58.023+00:00","published_at":"2026-10-24T21:40:44.679733+00:00","extraction_method":"structured","technologies":["core-cve","wireshark"],"cve_ids":["CVE-2026-95392"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Buffer Over-read in Wireshark","summary":"MBIM protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service","evidence":"cve:CVE-2026-95392","products":[{"name":{"value":"Wireshark","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-95392","aliases":["CVE-2026-95392"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://gitlab.com/wireshark/wireshark","vendor":"Wireshark Foundation","product":"Wireshark","versions":[{"status":"affected","version":"4.6.0","lessThan":"4.6.9","versionType":"semver"},{"status":"affected","version":"4.4.0","lessThan":"4.4.19","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-09-29T15:46:13.878Z","provider":"cve","references":["https://www.wireshark.org/security/wnpa-sec-2026-100.html","https://gitlab.com/wireshark/wireshark/-/work_items/21549","https://gitlab.com/wireshark/wireshark/-/work_items/21550"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-95392","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-29T15:45:45.889007Z"}}}],"references":[{"url":"https://gitlab.com/wireshark/wireshark/-/work_items/21550","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T15:46:13.878Z"}}],"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-09-29T09:32:58.023Z"}}},"related_cves":[{"value":"CVE-2026-95392","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"context_update":false},{"id":3785,"advisory_id":"59879d70-55cf-4f00-9df9-a969db541e35","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-95391","source_published_at":"2026-09-29T09:33:43.016+00:00","published_at":"2026-10-24T21:40:44.059745+00:00","extraction_method":"structured","technologies":["core-cve","wireshark"],"cve_ids":["CVE-2026-95391"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Use After Free in Wireshark","summary":"ZigBee ZCL protocol dissector crash in 4.6.0 to 4.6.8 allows denial of service","evidence":"cve:CVE-2026-95391","products":[{"name":{"value":"Wireshark","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-95391","aliases":["CVE-2026-95391"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://gitlab.com/wireshark/wireshark","vendor":"Wireshark Foundation","product":"Wireshark","versions":[{"status":"affected","version":"4.6.0","lessThan":"4.6.9","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-09-29T15:39:43.067Z","provider":"cve","references":["https://www.wireshark.org/security/wnpa-sec-2026-92.html","https://gitlab.com/wireshark/wireshark/-/merge_requests/26096"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-95391","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-29T12:42:11.728266Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T15:39:43.067Z"}}],"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-09-29T09:33:43.016Z"}}},"related_cves":[{"value":"CVE-2026-95391","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"context_update":false},{"id":3784,"advisory_id":"eb3c2097-e634-42b5-858f-f040184e887d","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-95388","source_published_at":"2026-09-29T09:31:13.021+00:00","published_at":"2026-10-24T21:40:43.269338+00:00","extraction_method":"structured","technologies":["core-cve","wireshark"],"cve_ids":["CVE-2026-95388"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Heap-based Buffer Overflow in Wireshark","summary":"Sharkd utility crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service","evidence":"cve:CVE-2026-95388","products":[{"name":{"value":"Wireshark","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-95388","aliases":["CVE-2026-95388"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://gitlab.com/wireshark/wireshark","vendor":"Wireshark Foundation","product":"Wireshark","versions":[{"status":"affected","version":"4.6.0","lessThan":"4.6.9","versionType":"semver"},{"status":"affected","version":"4.4.0","lessThan":"4.4.19","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-09-29T15:45:03.384Z","provider":"cve","references":["https://www.wireshark.org/security/wnpa-sec-2026-101.html","https://gitlab.com/wireshark/wireshark/-/work_items/21545"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-95388","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-29T15:44:32.174489Z"}}}],"references":[{"url":"https://gitlab.com/wireshark/wireshark/-/work_items/21545","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T15:45:03.384Z"}}],"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-09-29T09:31:13.021Z"}}},"related_cves":[{"value":"CVE-2026-95388","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"context_update":false},{"id":3770,"advisory_id":"61488b53-fd87-417e-bcfb-0517a76c2883","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-96420","source_published_at":"2026-09-29T09:30:43.018+00:00","published_at":"2026-10-24T21:40:34.213544+00:00","extraction_method":"structured","technologies":["core-cve","wireshark"],"cve_ids":["CVE-2026-96420"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Buffer Over-read in Wireshark","summary":"Toshiba file parser crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service","evidence":"cve:CVE-2026-96420","products":[{"name":{"value":"Wireshark","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-96420","aliases":["CVE-2026-96420"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.7,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://gitlab.com/wireshark/wireshark","vendor":"Wireshark Foundation","product":"Wireshark","versions":[{"status":"affected","version":"4.6.0","lessThan":"4.6.9","versionType":"semver"},{"status":"affected","version":"4.4.0","lessThan":"4.4.19","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-09-29T15:31:28.923Z","provider":"cve","references":["https://www.wireshark.org/security/wnpa-sec-2026-105.html","https://gitlab.com/wireshark/wireshark/-/work_items/21541"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-96420","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-29T15:31:10.433771Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T15:31:28.923Z"}}],"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-09-29T09:30:43.018Z"}}},"related_cves":[{"value":"CVE-2026-96420","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"context_update":false},{"id":3769,"advisory_id":"360e729d-873c-4975-bd35-4bd20b30012a","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-96419","source_published_at":"2026-09-29T09:30:48.021+00:00","published_at":"2026-10-24T21:40:33.411259+00:00","extraction_method":"structured","technologies":["core-cve","wireshark"],"cve_ids":["CVE-2026-96419"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wireshark","summary":"Profile import crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service and possible code execution","evidence":"cve:CVE-2026-96419","products":[{"name":{"value":"Wireshark","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-96419","aliases":["CVE-2026-96419"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://gitlab.com/wireshark/wireshark","vendor":"Wireshark Foundation","product":"Wireshark","versions":[{"status":"affected","version":"4.6.0","lessThan":"4.6.9","versionType":"semver"},{"status":"affected","version":"4.4.0","lessThan":"4.4.19","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-09-29T15:35:24.683Z","provider":"cve","references":["https://www.wireshark.org/security/wnpa-sec-2026-106.html","https://gitlab.com/wireshark/wireshark/-/work_items/21553"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-96419","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-29T15:34:52.465339Z"}}}],"references":[{"url":"https://gitlab.com/wireshark/wireshark/-/work_items/21553","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T15:35:24.683Z"}}],"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-09-29T09:30:48.021Z"}}},"related_cves":[{"value":"CVE-2026-96419","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"context_update":false},{"id":3768,"advisory_id":"0e838188-5a17-411e-b6ac-e0f81256caeb","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-96418","source_published_at":"2026-09-29T09:30:53.027+00:00","published_at":"2026-10-24T21:40:32.794769+00:00","extraction_method":"structured","technologies":["core-cve","wireshark"],"cve_ids":["CVE-2026-96418"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark","summary":"TIFF protocol dissector infinite loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service","evidence":"cve:CVE-2026-96418","products":[{"name":{"value":"Wireshark","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-96418","aliases":["CVE-2026-96418"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://gitlab.com/wireshark/wireshark","vendor":"Wireshark Foundation","product":"Wireshark","versions":[{"status":"affected","version":"4.6.0","lessThan":"4.6.9","versionType":"semver"},{"status":"affected","version":"4.4.0","lessThan":"4.4.19","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-09-29T15:36:36.106Z","provider":"cve","references":["https://www.wireshark.org/security/wnpa-sec-2026-107.html","https://gitlab.com/wireshark/wireshark/-/work_items/21565"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-96418","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-29T15:36:03.765182Z"}}}],"references":[{"url":"https://gitlab.com/wireshark/wireshark/-/work_items/21565","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T15:36:36.106Z"}}],"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-09-29T09:30:53.027Z"}}},"related_cves":[{"value":"CVE-2026-96418","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"context_update":false},{"id":3767,"advisory_id":"c2efa0fd-bc99-4f3d-b748-222594b60dac","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-96416","source_published_at":"2026-09-29T09:30:33.022+00:00","published_at":"2026-10-24T21:40:32.207141+00:00","extraction_method":"structured","technologies":["core-cve","wireshark"],"cve_ids":["CVE-2026-96416"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Heap-based Buffer Overflow in Wireshark","summary":"IEEE 802.11 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service","evidence":"cve:CVE-2026-96416","products":[{"name":{"value":"Wireshark","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-96416","aliases":["CVE-2026-96416"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://gitlab.com/wireshark/wireshark","vendor":"Wireshark Foundation","product":"Wireshark","versions":[{"status":"affected","version":"4.6.0","lessThan":"4.6.9","versionType":"semver"},{"status":"affected","version":"4.4.0","lessThan":"4.4.19","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-09-29T15:28:14.729Z","provider":"cve","references":["https://www.wireshark.org/security/wnpa-sec-2026-109.html","https://gitlab.com/wireshark/wireshark/-/work_items/21564"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-96416","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-29T15:27:46.354467Z"}}}],"references":[{"url":"https://gitlab.com/wireshark/wireshark/-/work_items/21564","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T15:28:14.729Z"}}],"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-09-29T09:30:33.022Z"}}},"related_cves":[{"value":"CVE-2026-96416","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"context_update":false},{"id":3762,"advisory_id":"d62914dc-d560-4610-be53-f0b71d167662","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-95390","source_published_at":"2026-09-29T09:33:23.026+00:00","published_at":"2026-10-24T21:40:28.798475+00:00","extraction_method":"structured","technologies":["core-cve","wireshark"],"cve_ids":["CVE-2026-95390"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"NULL Pointer Dereference in Wireshark","summary":"PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service","evidence":"cve:CVE-2026-95390","products":[{"name":{"value":"Wireshark","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-95390","aliases":["CVE-2026-95390"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://gitlab.com/wireshark/wireshark","vendor":"Wireshark Foundation","product":"Wireshark","versions":[{"status":"affected","version":"4.6.0","lessThan":"4.6.9","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-09-29T15:19:23.798Z","provider":"cve","references":["https://www.wireshark.org/security/wnpa-sec-2026-95.html","https://gitlab.com/wireshark/wireshark/-/work_items/21503"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-95390","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-29T15:18:54.465251Z"}}}],"references":[{"url":"https://gitlab.com/wireshark/wireshark/-/work_items/21503","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T15:19:23.798Z"}}],"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-09-29T09:33:23.026Z"}}},"related_cves":[{"value":"CVE-2026-95390","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"context_update":false},{"id":3761,"advisory_id":"592e1cd6-2b09-49da-83bb-3dbe7fa1bb15","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-96415","source_published_at":"2026-09-29T09:30:28.05+00:00","published_at":"2026-10-24T21:40:28.015555+00:00","extraction_method":"structured","technologies":["core-cve","wireshark"],"cve_ids":["CVE-2026-96415"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Stack-based Buffer Overflow in Wireshark","summary":"Catapult DCT2000 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service","evidence":"cve:CVE-2026-96415","products":[{"name":{"value":"Wireshark","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-96415","aliases":["CVE-2026-96415"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://gitlab.com/wireshark/wireshark","vendor":"Wireshark Foundation","product":"Wireshark","versions":[{"status":"affected","version":"4.6.0","lessThan":"4.6.9","versionType":"semver"},{"status":"affected","version":"4.4.0","lessThan":"4.4.19","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-09-29T15:20:29.380Z","provider":"cve","references":["https://www.wireshark.org/security/wnpa-sec-2026-110.html","https://gitlab.com/wireshark/wireshark/-/work_items/21589"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-96415","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-29T15:20:06.893969Z"}}}],"references":[{"url":"https://gitlab.com/wireshark/wireshark/-/work_items/21589","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T15:20:29.380Z"}}],"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-09-29T09:30:28.050Z"}}},"related_cves":[{"value":"CVE-2026-96415","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"context_update":false},{"id":3760,"advisory_id":"bf12be8e-c98e-4617-a418-add277ac05a3","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-95389","source_published_at":"2026-09-29T09:33:38.02+00:00","published_at":"2026-10-24T21:40:27.420206+00:00","extraction_method":"structured","technologies":["core-cve","wireshark"],"cve_ids":["CVE-2026-95389"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Heap-based Buffer Overflow in Wireshark","summary":"SCTP protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service","evidence":"cve:CVE-2026-95389","products":[{"name":{"value":"Wireshark","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-95389","aliases":["CVE-2026-95389"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.1,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://gitlab.com/wireshark/wireshark","vendor":"Wireshark Foundation","product":"Wireshark","versions":[{"status":"affected","version":"4.6.0","lessThan":"4.6.9","versionType":"semver"},{"status":"affected","version":"4.4.0","lessThan":"4.4.19","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-09-29T15:17:14.877Z","provider":"cve","references":["https://www.wireshark.org/security/wnpa-sec-2026-93.html","https://gitlab.com/wireshark/wireshark/-/work_items/21481"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-95389","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-29T15:16:36.326142Z"}}}],"references":[{"url":"https://gitlab.com/wireshark/wireshark/-/work_items/21481","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T15:17:14.877Z"}}],"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-09-29T09:33:38.020Z"}}},"related_cves":[{"value":"CVE-2026-95389","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"context_update":false},{"id":3759,"advisory_id":"b043c1cb-eb18-4bae-a4a1-015144d899db","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-95386","source_published_at":"2026-09-29T09:33:28.017+00:00","published_at":"2026-10-24T21:40:26.819858+00:00","extraction_method":"structured","technologies":["core-cve","wireshark"],"cve_ids":["CVE-2026-95386"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark","summary":"TTL file parser infinite loop in 4.6.0 to 4.6.8 allows denial of service","evidence":"cve:CVE-2026-95386","products":[{"name":{"value":"Wireshark","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-95386","aliases":["CVE-2026-95386"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://gitlab.com/wireshark/wireshark","vendor":"Wireshark Foundation","product":"Wireshark","versions":[{"status":"affected","version":"4.6.0","lessThan":"4.6.9","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-09-29T15:18:27.228Z","provider":"cve","references":["https://www.wireshark.org/security/wnpa-sec-2026-94.html","https://gitlab.com/wireshark/wireshark/-/work_items/21501"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-95386","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-29T15:17:45.910211Z"}}}],"references":[{"url":"https://gitlab.com/wireshark/wireshark/-/work_items/21501","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T15:18:27.228Z"}}],"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-09-29T09:33:28.017Z"}}},"related_cves":[{"value":"CVE-2026-95386","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"context_update":false}],"next_after":21435,"next_before":3759}