CVE-2025-11626: 
Wireshark vulnerability analysis and mitigation

The vulnerability CVE-2025-11626 affects the MONGO dissector in Wireshark versions 4.4.0 to 4.4.9 and 4.2.0 to 4.2.13. This security flaw was discovered and disclosed on October 8, 2025, and involves an infinite loop condition that could lead to denial of service (Wireshark Advisory, NVD).

The vulnerability is classified as CWE-835 (Loop with Unreachable Exit Condition - 'Infinite Loop'). It has been assigned a CVSS v3.1 base score of 5.5 (Medium) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H, indicating local attack vector, low attack complexity, no privileges required, and user interaction required (NVD).

The vulnerability can cause Wireshark to consume excessive CPU resources, potentially leading to a denial of service condition. The impact is limited to availability with no effect on confidentiality or integrity of the system (Wireshark Advisory).

Users are advised to upgrade to Wireshark versions 4.4.10, 4.2.14, or later to address this vulnerability. These patched versions have been released to fix the infinite loop issue in the MONGO dissector (Wireshark Advisory).