CVE-2026-95389: Wireshark

High severity, CVSS 8.1. EPSS: 0.4% chance of exploitation in the next 30 days.

SCTP protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

Affected products

• Wireshark Wireshark: from 4.4.0, before 4.4.19 (fixed in 4.4.19); from 4.6.0, before 4.6.9 (fixed in 4.6.9)

Published 2026-09-29. Last modified 2026-10-08.