CVE-2026-95390 - Vulnerability Details - OpenCVE

PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation poc

Automatable no

Technical Impact partial

Vendors	Products
Wireshark	Wireshark

Configuration 1 [-]

cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://gitlab.com/wireshark/wireshark/-/work_items/21503
https://nvd.nist.gov/vuln/detail/CVE-2026-95390
https://www.cve.org/CVERecord?id=CVE-2026-95390
https://www.wireshark.org/security/wnpa-sec-2026-95.html

History

Thu, 08 Oct 2026 01:45:00 +0000

Type	Values Removed	Values Added
CPEs		cpe:2.3:a:wireshark:wireshark::::::::

Wed, 30 Sep 2026 01:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Wireshark Wireshark wireshark
Vendors & Products		Wireshark Wireshark wireshark

Tue, 29 Sep 2026 16:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Tue, 29 Sep 2026 13:15:00 +0000

Type	Values Removed	Values Added
Description		PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service
Title		NULL Pointer Dereference in Wireshark
Weaknesses		CWE-125 CWE-476
References		https://gitlab.com/wireshark/wireshark/-/work_items/21503 https://nvd.nist.gov/vuln/detail/CVE-2026-95390 https://www.cve.org/CVERecord?id=CVE-2026-95390 https://www.wireshark.org/security/wnpa-sec-2026-95.html
Metrics	threat_severity `None`	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'}` threat_severity `Moderate`

MITRE

Status: PUBLISHED

Assigner: GitLab

Published: 2026-09-29T09:33:23.026Z

Updated: 2026-09-29T15:19:23.798Z

Reserved: 2026-09-22T05:34:16.707Z

Link: CVE-2026-95390

Vulnrichment

Updated: 2026-09-29T15:19:19.138Z

NVD

Status : Analyzed

Published: 2026-09-29T10:17:15.160

Modified: 2026-10-08T01:33:29.193

Link: CVE-2026-95390

Redhat

Severity : Moderate

Publid Date: 2026-09-29T09:33:23Z

Links: CVE-2026-95390 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-95390", "assignerOrgId": "ceab7361-8a18-47b1-92ba-4d7d25f6715a", "state": "PUBLISHED", "assignerShortName": "GitLab", "dateReserved": "2026-09-22T05:34:16.707Z", "datePublished": "2026-09-29T09:33:23.026Z", "dateUpdated": "2026-09-29T15:19:23.798Z"}, "containers": {"cna": {"title": "NULL Pointer Dereference in Wireshark", "descriptions": [{"lang": "en", "value": "PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service"}], "affected": [{"vendor": "Wireshark Foundation", "product": "Wireshark", "repo": "https://gitlab.com/wireshark/wireshark", "versions": [{"version": "4.6.0", "status": "affected", "lessThan": "4.6.9", "versionType": "semver"}], "defaultStatus": "unaffected"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-476: NULL Pointer Dereference", "cweId": "CWE-476", "type": "CWE"}]}], "references": [{"url": "https://www.wireshark.org/security/wnpa-sec-2026-95.html"}, {"url": "https://gitlab.com/wireshark/wireshark/-/work_items/21503"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM"}}], "solutions": [{"lang": "en", "value": "Upgrade to version 4.6.9 or above"}], "credits": [{"lang": "en", "value": "Daniel Birtwhistle", "type": "finder"}], "providerMetadata": {"orgId": "ceab7361-8a18-47b1-92ba-4d7d25f6715a", "shortName": "GitLab", "dateUpdated": "2026-09-29T09:33:23.026Z"}}, "adp": [{"references": [{"url": "https://gitlab.com/wireshark/wireshark/-/work_items/21503", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-09-29T15:18:54.465251Z", "id": "CVE-2026-95390", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-29T15:19:23.798Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-95390", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-09-29T15:18:54.465251Z"}}}], "references": [{"url": "https://gitlab.com/wireshark/wireshark/-/work_items/21503", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-29T15:19:19.138Z"}}], "cna": {"title": "NULL Pointer Dereference in Wireshark", "credits": [{"lang": "en", "type": "finder", "value": "Daniel Birtwhistle"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"repo": "https://gitlab.com/wireshark/wireshark", "vendor": "Wireshark Foundation", "product": "Wireshark", "versions": [{"status": "affected", "version": "4.6.0", "lessThan": "4.6.9", "versionType": "semver"}], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "Upgrade to version 4.6.9 or above"}], "references": [{"url": "https://www.wireshark.org/security/wnpa-sec-2026-95.html"}, {"url": "https://gitlab.com/wireshark/wireshark/-/work_items/21503"}], "descriptions": [{"lang": "en", "value": "PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-476", "description": "CWE-476: NULL Pointer Dereference"}]}], "providerMetadata": {"orgId": "ceab7361-8a18-47b1-92ba-4d7d25f6715a", "shortName": "GitLab", "dateUpdated": "2026-09-29T09:33:23.026Z"}}}, "cveMetadata": {"cveId": "CVE-2026-95390", "state": "PUBLISHED", "dateUpdated": "2026-09-29T15:19:23.798Z", "dateReserved": "2026-09-22T05:34:16.707Z", "assignerOrgId": "ceab7361-8a18-47b1-92ba-4d7d25f6715a", "datePublished": "2026-09-29T09:33:23.026Z", "assignerShortName": "GitLab"}, "dataVersion": "5.2"}