Loading vulnerability…
Wireshark PEAK CAN TRC File Parser Denial of Service
CVE-2026-95390 is a crash vulnerability in the Wireshark PEAK CAN TRC file parser affecting versions 4.6.0 through 4.6.8. Parsing a specially crafted CAN TRC file can cause the affected application to crash, resulting in denial of service.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
An attacker who can cause Wireshark to parse a specially crafted CAN TRC file can crash the application, causing a denial of service.
If you can’t patch tonight, do this now.
Until updates are deployed, limit use of affected Wireshark installations when opening or processing untrusted packet captures or network traffic, and apply appropriate network and endpoint access controls.
Patch, then assume compromise.
Upgrade Wireshark 4.6.x to version 4.6.9 or later. More generally, deploy a vendor-provided release later than 4.6.8.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
3 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.