CVE-2026-6522 Wireshark Foundation CVE debrief

Who should care

Network administrators and security teams responsible for managing and securing network infrastructure using Wireshark should assess their exposure to this vulnerability and take necessary actions to mitigate it.

Why it matters

CVE-2026-6522 is a medium-severity vulnerability in Wireshark's RPKI-Router protocol dissector that could lead to a denial of service. Network administrators and security teams should assess exposure, apply patches or mitigations, and monitor network traffic and system logs.

• Potential denial of service due to infinite loop in RPKI-Router protocol dissector.
• Need for patching or updating Wireshark to prevent exploitation.
• Importance of monitoring network traffic and system logs for potential exploitation attempts.
• Verification of network configurations and Wireshark versions in use.

Technical summary

The RPKI-Router protocol dissector in Wireshark is vulnerable to an infinite loop, which could lead to a denial of service. This issue affects Wireshark versions 4.4.0 to 4.4.14 and 4.6.0 to 4.6.4. The vulnerability has a medium severity and is considered a potential denial of service. The vulnerability was publicly disclosed on 2026-04-30T07:16:39.390Z. The CVE record and NVD vulnerability detail page provide information on the vulnerability, its impact, and affected versions.

Defensive priority

Medium priority for network administrators and security teams to assess exposure and apply patches or mitigations.

Recommended defensive actions

• Assess exposure by reviewing network configurations and Wireshark versions in use.
• Apply patches or updates to Wireshark to address the vulnerability.
• Monitor network traffic and system logs for potential exploitation attempts.

Evidence notes

The CVE record and NVD vulnerability detail page provide information on the vulnerability, its impact, and affected versions. The vulnerability was publicly disclosed on 2026-04-30T07:16:39.390Z. The RPKI-Router protocol dissector in Wireshark is vulnerable to an infinite loop, which could lead to a denial of service. This issue affects Wireshark versions 4.4.0 to 4.4.14 and 4.6.0 to 4.6.4. The vulnerability has a medium severity and is considered a potential denial of service. Network

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.