Skip to main content
VulnerabilityPublished

ZDI-26-900: Wireshark SMB Object Export Integer Overflow Remote Code Execution Vulnerability

Source Zero Day Initiative

0
Severity
High

Rated High by Zero Day Initiative

Data as of 10 Nov 2026, 15:49 UTC

What to do

AI-suggested

Until a fix is available, users should exercise caution when opening or analyzing untrusted SMB traffic or capture files in Wireshark.

Description

A remote code execution vulnerability exists in Wireshark due to an integer overflow in SMB Object Export processing. Exploitation requires user interaction. The vulnerability has a high severity rating of 8.8 assigned by ZDI.

References

Community reviews

Loading reviews…