PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-6520 Wireshark Foundation CVE debrief

A vulnerability in the OpenFlow v6 protocol dissector in Wireshark versions 4.4.0 to 4.4.14 and 4.6.0 to 4.6.4 allows for denial of service attacks due to an infinite loop. This CVE has been recorded with a CVSS score of 5.5 and a severity rating of MEDIUM. The vulnerability can be exploited by attackers to cause a denial of service, potentially impacting network availability and reliability. Network administrators and security teams should assess their exposure and prioritize updates to prevent potential attacks. The CVE record and NVD vulnerability detail page provide information on the vulnerability, including its CVSS score and affected versions.

Vendor
Wireshark Foundation
Product
Wireshark
CVSS
MEDIUM 5.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-04-30
Original CVE updated
2026-10-26
Advisory published
2026-04-30
Advisory updated
2026-10-26

Who should care

Network administrators and security teams responsible for managing Wireshark installations should assess their exposure and prioritize updates to prevent potential denial of service attacks.

Why it matters

CVE-2026-6520 is a medium-severity vulnerability in Wireshark's OpenFlow v6 protocol dissector that can be exploited for denial of service attacks. Defenders should prioritize updating Wireshark to a non-vulnerable version to prevent potential attacks.

  • Potential denial of service attacks against Wireshark installations
  • Need to verify Wireshark versions and update to a non-vulnerable version
  • Possible impact on network availability and reliability

Technical summary

The OpenFlow v6 protocol dissector in Wireshark is vulnerable to an infinite loop, which can be exploited for denial of service attacks. The vulnerability affects Wireshark versions 4.4.0 to 4.4.14 and 4.6.0 to 4.6.4. This CVE has been recorded with a CVSS score of 5.5 and a severity rating of MEDIUM. Defenders should prioritize updating Wireshark to a version outside of the affected ranges to prevent potential denial of service attacks. The vulnerability can be mitigated by updating Wireshark to a non-vulnerable version.

Defensive priority

Defenders should prioritize updating Wireshark to a version outside of the affected ranges to prevent potential denial of service attacks.

Recommended defensive actions

  • Update Wireshark to a version outside of the affected ranges (4.4.0 to 4.4.14 and 4.6.0 to 4.6.4)
  • Review network configurations to ensure Wireshark is not exposed to untrusted networks
  • Monitor Wireshark logs for potential denial of service attacks

Evidence notes

The CVE record and NVD vulnerability detail page provide information on the vulnerability, including its CVSS score and affected versions. The OpenFlow v6 protocol dissector in Wireshark is vulnerable to an infinite loop, which can be exploited for denial of service attacks. The vulnerability affects Wireshark versions 4.4.0 to 4.4.14 and 4.6.0 to 4.6.4. There is limited evidence available on the exploitability of this vulnerability, and defenders should verify the affected versions in

Sources and references

Verified primary and authoritative sources

  • CVE-2026-6520 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-6520

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-6520 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-6520

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.