What is CVE-2026-5405?

CVE-2026-5405 is a high-severity software vulnerability (CWE-122) with a CVSS score of 7.8. RDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution

Is CVE-2026-5405 being actively exploited?

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 0%.

What products does CVE-2026-5405 affect?

Tracked products affected include Wireshark. Check the version you run to see whether it is affected.

How do I fix CVE-2026-5405?

Apply the vendor fix promptly. Upgrade affected products to a fixed version.

← All products

CVE-2026-5405

HIGH severity · CVSS 7.8 · CWE-122

7.8CVSS HIGH

Summary

RDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution

Impact & exploitability

Attack vectorLocal

Attack complexityLow

Privileges requiredNone

User interactionRequired

Confidentiality impactHigh

Integrity impactHigh

Availability impactHigh

Exploit probability (EPSS)0%

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products we track (1)

Wireshark

Recommendation

Apply the vendor fix promptly. Open any affected product above for its exact safe version.

Additional information

NVD record
https://www.wireshark.org/security/wnpa-sec-2026-17.htmlAdvisory
https://access.redhat.com/errata/RHSA-2026:20600
https://access.redhat.com/errata/RHSA-2026:26182
https://access.redhat.com/security/cve/CVE-2026-5405
https://bugzilla.redhat.com/show_bug.cgi?id=2464273
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5405.json
https://gitlab.com/wireshark/wireshark/-/issues/21105Advisory