Wireshark CVE-2026-6528

Upgrade Wireshark to version 4.6.5 or later to resolve the TLS dissector infinite loop. The vendor advisory at https://www.wireshark.org/security/wnpa-sec-2026-33.html provides patched release information. Users unable to immediately upgrade should avoid opening packet capture files from untrusted sources and restrict file access to the Wireshark application by disabling auto-open features for .pcap files in their operating system. Consider using a sandboxed environment or isolated virtual machine when analyzing network traffic from untrusted origins; this prevents a hung Wireshark process from affecting production systems. The mitigation has the trade-off of reducing analyst productivity if frequent packet analysis is required, but significantly reduces exposure to this denial of service vector.