CVE-2026-96419: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wireshark
Published Sep 29, 2026
·Updated
Profile import crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service and possible code execution
Affected Software
1 affected component
Wireshark Wireshark>=4.6.0<=4.6.8, >=4.4.0<=4.4.18
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Wiresharkto a version that resolves this vulnerability.Fixed in 4.6.9
Event History
Sep 29, 2026
CVE Published
via MITRE·09:30 AM
Data Sourced
via MITRE·09:30 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·10:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which Wireshark releases are affected?
The issue affects Wireshark versions 4.6.0 through 4.6.8 and 4.4.0 through 4.4.18.
2
What level of access or interaction is required to exploit this issue?
The supplied CVSS vector indicates local access is required, no privileges are required, and user interaction is required. The reported impact includes denial of service and possible code execution.