Loading vulnerability…
Denial of service in Wireshark Sharkd
CVE-2026-95388 is a crash vulnerability in the Wireshark Sharkd utility affecting versions 4.6.0 through 4.6.8 and 4.4.0 through 4.4.18, inclusive. Exploitation can crash Sharkd and cause denial of service. The underlying defect, vulnerable function, and triggering input are currently unavailable.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
An attacker may cause the Sharkd utility to crash, interrupting the affected process or service. Arbitrary code execution is not established for this specific vulnerability.
If you can’t patch tonight, do this now.
Until updates are deployed, limit the use of affected Wireshark installations for opening or processing untrusted packet captures or network traffic, and apply appropriate network and endpoint access controls. These are general precautions; a Sharkd-specific workaround is currently unavailable.
Patch, then assume compromise.
Upgrade Wireshark 4.4.x to version 4.4.19 or later, or Wireshark 4.6.x to version 4.6.9 or later. On Debian 13 (trixie), upgrade the affected Wireshark packages to version 4.4.19-0+deb13u1 or later.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
5 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.