The Wireshark network protocol analyzer packages in Red Hat Enterprise Linux 10 and related distributions contain two vulnerabilities: a heap-based buffer overflow (CWE-122) identified as CVE-2026-5405, and an improper limitation of a pathname to a restricted directory (path traversal, CWE-22) identified as CVE-2026-5656. These vulnerabilities have been addressed in updated Wireshark packages released by Red Hat. The advisory RHSA-2026:20600 details the fixes and affected product versions. No CVSS scores are provided in the advisory, but the issues are rated with a security impact of Important by Red Hat Product Security.

The heap-based buffer overflow could allow an attacker to cause a crash or potentially execute arbitrary code within the context of the Wireshark application. The path traversal vulnerability could allow unauthorized access to files outside of intended directories. Both vulnerabilities affect multiple architectures and variants of Red Hat Enterprise Linux 10 and CodeReady Linux Builder. There are no known exploits in the wild at the time of the advisory.

Red Hat has released updated Wireshark packages that address these vulnerabilities. Users should apply the security update as described in Red Hat advisory RHSA-2026:20600 and the referenced article https://access.redhat.com/articles/11258. Since this is an on-premises product, remediation requires manual update by system administrators. Patch status is confirmed as fixed in the updated packages. No additional mitigation steps are specified or required beyond applying the update.