[ Vendor · 3 CVEs ]
spesmilo
CVEs affecting spesmilo published in the last 30 days, plus any spesmilo CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-117602 | 27 Oct 2026 | CVSS 8.4 | spesmilo electrumElectrum 4.6.0 before 4.7.2 contains an authorization bypass in the external plugin loader, which executes a plugin's __init__.py module when the… | |
| CVE-2026-117603 | 27 Oct 2026 | CVSS 4.3 | spesmilo electrumElectrum before 4.7.2 contains a spending limit bypass vulnerability in the Nostr Wallet Connect plugin that allows malicious NWC clients to exceed… | |
| CVE-2026-117601 | 27 Oct 2026 | CVSS 7.5 | Electrum: Malicious server can replace a just-broadcast tx and try to trick user into RBF-ing itElectrum before 4.8.3 fails to verify signatures of wallet-owned inputs in unconfirmed mempool transactions, allowing malicious servers to replace a… | Fix |