Skip to main content
VulnerabilityPublished

ZDI-26-898: Wireshark LoRaWAN Decryption Numeric Truncation Error Remote Code Execution Vulnerability

Source Zero Day Initiative

0
Severity
High

Rated High by Zero Day Initiative

Data as of 10 Nov 2026, 15:49 UTC

What to do

AI-suggested

Until a fix is available, disabling LoRaWAN decryption in Wireshark will mitigate exposure.

Description

A remote code execution vulnerability exists in Wireshark's LoRaWAN decryption feature. Network-adjacent attackers can exploit this flaw without authentication, but only if LoRaWAN decryption is enabled.

References

Community reviews

Loading reviews…