CVE-2026-95394
published 2026-09-29CVE-2026-95394: Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
PriorityP416medium4.7CVSS 3.1
AVLACHPRNUIRSUCNINAH
EPSS
0.14%
3.3th percentile
Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| gitlab | wireshark | — | — |
| wireshark | wireshark | >= 4.4.0 < 4.4.19 | 4.4.19 |
| wireshark | wireshark | >= 4.6.0 < 4.6.9 | 4.6.9 |
| wireshark_foundation | wireshark | >= 4.4.0 < 4.4.19 | 4.4.19 |
| wireshark_foundation | wireshark | >= 4.6.0 < 4.6.9 | 4.6.9 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Microsoft Network Monitor up to 4.4.18/4.6.8 File Parser infinite loop (Nessus ID 362908)
vuldb·2026-10-05·CVSS 4.7
CVE-2026-95394 [MEDIUM] Microsoft Network Monitor up to 4.4.18/4.6.8 File Parser infinite loop (Nessus ID 362908)
A vulnerability classified as problematic has been found in Microsoft Network Monitor up to 4.4.18/4.6.8. This vulnerability affects unknown code of the component File Parser. Performing a manipulation results in infinite loop.
This vulnerability is cataloged as CVE-2026-95394. The attack must be initiated from a local position. There is no exploit available.
It is recommended to upgrade the affected component.
GHSA
Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
ghsa_unreviewed·2026-09-29
CVE-2026-95394 [MEDIUM] CWE-606 Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
GitLab
Unchecked Input for Loop Condition in Wireshark
vendor_gitlab·2026-09-29·CVSS 4.7
CVE-2026-95394 [MEDIUM] CWE-606 Unchecked Input for Loop Condition in Wireshark
Unchecked Input for Loop Condition in Wireshark
Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
Affected products: Wireshark
Affected versions: >=4.6.0, =4.4.0, <4.4.19 (affected)
Solution: Upgrade to version 4.6.9 or above
Credit: Mayank Jangid (OpenSec Intelligence)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-09-29
Published