Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the verifySignature process. An attacker can cause the server to initiate arbitrary outbound HTTP requests to internal or external hosts by supplying a crafted Signature.keyId header, potentially...

Improper Neutralization of Special Elements Used in a Template Engine

Overview Affected versions of this package are vulnerable to Improper Neutralization of Special Elements Used in a Template Engine in the renderFromStringNoEscape process. An attacker can execute arbitrary code on the server by injecting malicious Twig expressions into the semantic template field...

EUVD-2026-42446

BLF file parser in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows possible information disclosure...

CVE-2026-15168 Use of Uninitialized Variable in Wireshark

BLF file parser in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows possible information disclosure...

CVE-2026-15164

Crash in ciscodump 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service...

CVE-2026-15170

Z39.50 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service...

UBUNTU-CVE-2026-15166

IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service...

UBUNTU-CVE-2026-15165

TLS ECH decryptor crash in Wireshark 4.6.0 to 4.6.6 allows denial of service...

CVE-2026-15164

Crash in ciscodump 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service...

CVE-2026-15166 Stack-based Buffer Overflow in Wireshark

IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service...

EUVD-2026-42420

Catapult DCT2000 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service...

CVE-2026-15173

pcapng file parser crash in Wireshark 4.6.0 to 4.6.6 allows denial of service...

CVE-2026-15173 Heap-based Buffer Overflow in Wireshark

pcapng file parser crash in Wireshark 4.6.0 to 4.6.6 allows denial of service...

CVE-2026-15169 Heap-based Buffer Overflow in Wireshark

UMTS FP protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service...

CVE-2026-15169

The CVE-2026-15169 issue concerns Wireshark’s UMTS FP protocol dissector crashing the application, causing a denial of service. Affected product/version details are Wireshark 4.6.0–4.6.6 and 4.4.0–4.4.16, as described in multiple sources. The root cause is a crash triggered by processing speciall...

CVE-2026-15170

The CVE-2026-15170 entry concerns the Wireshark Z39.50 protocol dissector crash. Affects Wireshark versions 4.6.0–4.6.6 and 4.4.0–4.4.16. Description indicates a crash leading to denial of service; no exploitation details or exploit status are provided in the documents. The root cause is describe...

CVE-2026-15165 Heap-based Buffer Overflow in Wireshark

TLS ECH decryptor crash in Wireshark 4.6.0 to 4.6.6 allows denial of service...

CVE-2026-15165

TLS ECH decryptor crash in Wireshark 4.6.0 to 4.6.6 allows denial of service...

CVE-2026-15165

CVE-2026-15165 affects Wireshark 4.6.0–4.6.6, where the TLS Encrypted Client Hello (ECH) decryptor can crash during decryption of a malformed packet, leading to a denial of service. Root cause: crash in the TLS ECH decryptor component. Impact: application crash and denial of service. CVSSv3.1 bas...

PT-2026-56591

Name of the Vulnerable Software and Affected Versions ciscodump versions 4.6.0 through 4.6.6 ciscodump versions 4.4.0 through 4.4.16 Description A crash in the software allows for a denial of service, which occurs when the system becomes unavailable to users. There are reports of this issue being...