This vulnerability (CVE-2026-5409) affects the Wireshark network protocol analyzer in specific versions (4.6.0 to 4.6.4 and 4.4.0 to 4.4.14). It is caused by uncontrolled recursion in the Monero protocol dissector, which can lead to a crash of the application, effectively causing a denial of service. The CVSS 3.1 base score is 5.5 (medium), with attack vector local, low attack complexity, no privileges required, user interaction required, unchanged scope, and impact limited to availability (no confidentiality or integrity impact). No vendor advisory or patch information is currently available, and no known exploits are reported in the wild.

Successful exploitation results in a denial of service by crashing Wireshark when processing Monero protocol data. This impacts availability of the affected Wireshark application instance but does not affect confidentiality or integrity of data. The attack requires local access and user interaction, limiting the attack surface.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should avoid opening untrusted Monero protocol traffic in the affected Wireshark versions. Monitor official Wireshark Foundation channels for updates and apply patches once released.