Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
5.5 MEDIUM
CVE-2026-6522 — Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

RPKI-Router protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

| Denial of Service
Apr 30, 2026 Apr 30, 2026
Apr 30, 2026
Apr 30, 2026
5.5 MEDIUM
CVE-2026-6521 — Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

OpenFlow v5 protocol dissector infinite loops in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

| Denial of Service
Apr 30, 2026 Apr 30, 2026
Apr 30, 2026
Apr 30, 2026
5.5 MEDIUM
CVE-2026-6520 — Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

OpenFlow v6 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

| Denial of Service
Apr 30, 2026 Apr 30, 2026
Apr 30, 2026
Apr 30, 2026
5.5 MEDIUM
CVE-2026-6519 — Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

MBIM protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

| Denial of Service
Apr 30, 2026 Apr 30, 2026
Apr 30, 2026
Apr 30, 2026
5.5 MEDIUM
CVE-2026-5657 — Double Free in Wireshark

iLBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

| Denial of Service
Apr 30, 2026 Apr 30, 2026
Apr 30, 2026
Apr 30, 2026
5.5 MEDIUM
CVE-2026-5655 — Use After Free in Wireshark

SDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 allows denial of service

| Denial of Service
Apr 30, 2026 Apr 30, 2026
Apr 30, 2026
Apr 30, 2026
5.5 MEDIUM
CVE-2026-5654 — Stack-based Buffer Overflow in Wireshark

AMR-NB codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

| Denial of Service
Apr 30, 2026 Apr 30, 2026
Apr 30, 2026
Apr 30, 2026
5.5 MEDIUM
CVE-2026-5653 — Heap-based Buffer Overflow in Wireshark

DCP-ETSI protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

| Denial of Service
Apr 30, 2026 Apr 30, 2026
Apr 30, 2026
Apr 30, 2026
5.5 MEDIUM
CVE-2026-5409 — Uncontrolled Recursion in Wireshark

Monero protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

| Denial of Service
Apr 30, 2026 Apr 30, 2026
Apr 30, 2026
Apr 30, 2026
5.5 MEDIUM
CVE-2026-5408 — Uncontrolled Recursion in Wireshark

BT-DHT protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

| Denial of Service
Apr 30, 2026 Apr 30, 2026
Apr 30, 2026
Apr 30, 2026
5.5 MEDIUM
CVE-2026-5407 — Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

SMB2 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

| Denial of Service
Apr 30, 2026 Apr 30, 2026
Apr 30, 2026
Apr 30, 2026
5.5 MEDIUM
CVE-2026-5406 — Uncontrolled Recursion in Wireshark

FC-SWILS protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

| Denial of Service
Apr 30, 2026 Apr 30, 2026
Apr 30, 2026
Apr 30, 2026
8.8 HIGH
CVE-2026-5402 — Heap-based Buffer Overflow in Wireshark

TLS protocol dissector heap overflow in Wireshark 4.6.0 to 4.6.4 allows denial of service and possible code execution

Remote | Memory Corruption
Apr 30, 2026 Apr 30, 2026
Apr 30, 2026
Apr 30, 2026
5.5 MEDIUM
CVE-2026-5401 — Uncontrolled Recursion in Wireshark

AFP Spotlight protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

| Denial of Service
Apr 30, 2026 Apr 30, 2026
Apr 30, 2026
Apr 30, 2026
5.5 MEDIUM
CVE-2026-5299 — Uncontrolled Recursion in Wireshark

ICMPv6 PvD protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

| Denial of Service
Apr 30, 2026 Apr 30, 2026
Apr 30, 2026
Apr 30, 2026
4.0 MEDIUM
CVE-2026-42798 — Little CMS Integer Overflow Vulnerability

Little CMS (lcms2) 2.16 through 2.18 before 2.19 has an integer overflow in ParseCube in cmscgats.c.

| Memory Corruption
Apr 30, 2026 Apr 30, 2026
Apr 30, 2026
Apr 30, 2026
0.0 NA
CVE-2026-42511 — Remote code execution via malicious DHCP options

The BOOTP file field is written to the lease file without escaping embedded double-quotes, allowing injection of arbitrary dhclient.conf directives. When the lease file is subsequently re-parsed by …

| Injection
Apr 30, 2026 Apr 30, 2026
Apr 30, 2026
Apr 30, 2026
6.1 MEDIUM
CVE-2026-41226 — Ricoh Web Image Monitor Open Redirect Vulnerability

Open redirect vulnerability exists in Multiple laser printers and MFPs which implement Ricoh Web Image Monitor. When accessing a specially crafted URL, the user may be redirected to an arbitrary webs…

| Misconfiguration
Apr 30, 2026 Apr 30, 2026
Apr 30, 2026
Apr 30, 2026
8.7 HIGH
CVE-2024-39847 — Arbitrary File Read and Server Side Request Forgery via XML External Entities in 4D Serve…

Unauthenticated attackers can exploit a weakness in the XML parser functionality of the SOAP endpoints in 4D server. This allows them to obtain read access to files on the application server and adja…

Remote | XML External Entity
Apr 30, 2026 Apr 30, 2026
Apr 30, 2026
Apr 30, 2026
5.5 MEDIUM
CVE-2026-7379 — Missing Release of Memory after Effective Lifetime in Wireshark

Memory leak in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

| Denial of Service
Apr 30, 2026 Apr 30, 2026
Apr 30, 2026
Apr 30, 2026
Showing 20 of 5911 Results