CVE-2026-95389

SCTP protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

Published Sep 29, 2026
CVSS 8.1 high
0.4% chance of exploitation in the next 30 days (EPSS)

Affected software

Wireshark Foundation Wireshark

In the news

⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests The Hacker News · Oct 5, 2026
Multiple vulnerabilities in Wireshark CERT-FR · Sep 24, 2026

CVE-2026-95389 at the National Vulnerability Database