ethereum

Products

Exploited and recent CVEs

• CVE-2026-111171 Medium 5.4 Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 CCIP-Read SSRF Bypass 0.3%
• CVE-2026-40072 Low 1.7 web3.py affected by SSRF via CCIP Read (EIP-3668) OffchainLookup URL handling 0.2%
• CVE-2026-26315 Medium 6.9 Go Ethereum Improperly Validates the ECIES Public Key in RLPx Handshake 0.5%
• CVE-2026-26314 High 8.7 Go Ethereum affected by DoS via malicious p2p message 0.7%
• CVE-2026-26313 Medium 6.9 Go Ethereum affected by DoS via malicious p2p message 0.7%
• CVE-2026-22868 High 7.1 go-ethereum has a DoS via malicious p2p message 0.6%
• CVE-2026-22862 High 7.1 go-ethereum has a DoS via malicious p2p message 0.7%
• CVE-2025-24883 High 8.7 go-ethereum has a DoS via malicious p2p message 0.7%
• CVE-2024-32972 High 7.5 go-ethereum denial of service via malicious p2p message 0.8%
• CVE-2023-40591 High 7.5 Denial of service via malicious p2p message in go-ethereum 1.1%
• CVE-2022-29177 Medium 5.9 DoS via malicious p2p message in Go-Ethereum 1.2%
• CVE-2021-41173 Medium 5.7 DoS via maliciously crafted p2p message 1.2%
• CVE-2021-39137 Medium 6.5 Consensus flaw during block processing in go-ethereum 1.3%
• CVE-2020-26264 Medium 6.5 LES Server DoS via GetProofsV2 1.9%
• CVE-2020-26265 Medium 5.3 Consensus flaw during block processing 0.9%
• CVE-2020-26240 Medium 5.3 Erroneous Proof of Work calculation in geth 1.9%
• CVE-2020-26241 Medium 6.5 Shallow copy bug in geth 1.2%
• CVE-2020-26242 Medium 6.5 Denial of service in geth 1.5%