CVE-2026-0960 MEDIUM

CVE-2026-0960: Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

Vendor Wireshark Foundation

Product Wireshark

Weakness CWE-835

Published January 14, 2026

Last update March 27, 2026

CVSS base score

4.7/10

Attack vector Local

Attack complexity High

Privileges required None

User interaction Required

Confidentiality None

Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

HTTP3 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.2 allows denial of service

Key dates

January 14, 2026 CVE published

March 27, 2026 Record updated

External resources

Related vulnerabilities