The version of Wireshark installed on the remote Windows host is prior to 4.6.7. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.6.7 advisory.

  - Memory leak in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service (CVE-2026-7379)

  - Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and     possible code execution (CVE-2026-5656)

  - Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service (CVE-2025-13499)

  - BPv7 dissector crash in Wireshark 4.6.0 allows denial of service (CVE-2025-13674)

  - HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service (CVE-2025-13945)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - NTS-KE protocol dissector crash in Wireshark 4.6.0 to 4.6.3 allows denial of service (CVE-2026-3202)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-f7473d3da8 advisory.

    New version 4.6.4


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.6.9. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.6.9 advisory.

  - C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service     (CVE-2026-76879, CVE-2026-76886)

  - HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service (CVE-2025-13945)

  - MEGACO dissector infinite loop in Wireshark 4.6.0 to 4.6.1 and 4.4.0 to 4.4.11 allows denial of service     (CVE-2025-13946)

  - IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of     service (CVE-2026-0959)

  - HTTP3 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.2 allows denial of service     (CVE-2026-0960)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote Windows host is prior to 4.6.4. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.6.4 advisory.

  - RF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of     service (CVE-2026-3203)

  - USB HID protocol dissector memory exhaustion in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial     of service (CVE-2026-3201)

  - NTS-KE protocol dissector crash in Wireshark 4.6.0 to 4.6.3 allows denial of service (CVE-2026-3202)

  - HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service (CVE-2025-13945)

  - MEGACO dissector infinite loop in Wireshark 4.6.0 to 4.6.1 and 4.4.0 to 4.4.11 allows denial of service     (CVE-2025-13946)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.6.5. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.6.5 advisory.

  - RF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of     service (CVE-2026-3203)

  - GSM RP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service     (CVE-2026-6870)

  - Monero protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service     (CVE-2026-5409)

  - BT-DHT protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service     (CVE-2026-5408)

  - FC-SWILS protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service     (CVE-2026-5406)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-71154797a5 advisory.

    Enabling a couple of python tools

    ----

    New version 6.4.6

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.6.4. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.6.4 advisory.

  - RF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of     service (CVE-2026-3203)

  - USB HID protocol dissector memory exhaustion in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial     of service (CVE-2026-3201)

  - NTS-KE protocol dissector crash in Wireshark 4.6.0 to 4.6.3 allows denial of service (CVE-2026-3202)

  - HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service (CVE-2025-13945)

  - MEGACO dissector infinite loop in Wireshark 4.6.0 to 4.6.1 and 4.4.0 to 4.4.11 allows denial of service     (CVE-2025-13946)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.6.8. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.6.8 advisory.

  - Pcapng file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service (CVE-2026-76929)

  - C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service     (CVE-2026-76879, CVE-2026-76886)

  - Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service (CVE-2025-13499)

  - BPv7 dissector crash in Wireshark 4.6.0 allows denial of service (CVE-2025-13674)

  - HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service (CVE-2025-13945)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.6.6. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.6.6 advisory.

  - Memory leak in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service (CVE-2026-7379)

  - Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and     possible code execution (CVE-2026-5656)

  - Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service (CVE-2025-13499)

  - BPv7 dissector crash in Wireshark 4.6.0 allows denial of service (CVE-2025-13674)

  - HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service (CVE-2025-13945)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.6.7. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.6.7 advisory.

  - Memory leak in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service (CVE-2026-7379)

  - Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and     possible code execution (CVE-2026-5656)

  - Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service (CVE-2025-13499)

  - BPv7 dissector crash in Wireshark 4.6.0 allows denial of service (CVE-2025-13674)

  - HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service (CVE-2025-13945)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
349344	Wireshark 4.6.x < 4.6.7 Multiple Vulnerabilities	Nessus	Windows	2026/9/23	2026/9/24	high
300137	Linux Distros Unpatched Vulnerability : CVE-2026-3202	Nessus	Misc.	2026/3/1	2026/11/6	high
302346	Fedora 43 : wireshark (2026-f7473d3da8)	Nessus	Fedora Local Security Checks	2026/3/15	2026/5/8	high
349570	Wireshark 4.6.x < 4.6.9 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	2026/9/23	2026/10/8	critical
300918	Wireshark 4.6.x < 4.6.4 Multiple Vulnerabilities	Nessus	Windows	2026/3/5	2026/5/8	high
311427	Wireshark 4.6.x < 4.6.5 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	2026/5/1	2026/5/5	high
303770	Fedora 44 : wireshark (2026-71154797a5)	Nessus	Fedora Local Security Checks	2026/3/26	2026/5/8	high
300919	Wireshark 4.6.x < 4.6.4 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	2026/3/5	2026/5/8	high
338409	Wireshark 4.6.x < 4.6.8 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	2026/8/20	2026/9/24	critical
349077	Wireshark 4.6.x < 4.6.6 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	2026/9/22	2026/9/23	high
349346	Wireshark 4.6.x < 4.6.7 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	2026/9/23	2026/9/24	high

偵測

搜尋 Plugin

high

high

high

critical

high

high

high

high

critical

high

high