CVE-2026-117602
Electrum 4.6.0 before 4.7.2 contains an authorization bypass in the external plugin loader, which executes a plugin's __init__.py module whe
CVSS
8.4
Alta
EPSS
0.1%
p1
KEV
—
Exploit Today
0
0-100
Publicado: 27 de out. de 2026 · Última mod.: 5 de nov. de 2026 · CWE-347
0.1%EPSS · 30 dias0.1%
2026-10-282026-11-07
Electrum 4.6.0 before 4.7.2 contains an authorization bypass in the external plugin loader, which executes a plugin's __init__.py module when the plugin is marked enabled in the config file, without verifying its plugin-password signature. A rogue local process with write access to the Electrum data directory can place plugin code in the plugins/ folder and mark it enabled, causing arbitrary code execution inside the Electrum process.
- github.comhttps://github.com/spesmilo/electrum/commit/032dfcf107da1d31bbee5d64ca978e554fd8e982
- github.comhttps://github.com/spesmilo/electrum/commit/fd7164d6dc1560b6f153c018cabf17e9411c5414
- github.comhttps://github.com/spesmilo/electrum/security/advisories/GHSA-vw94-r84p-66qf
- www.vulncheck.comhttps://www.vulncheck.com/advisories/electrum-before-4.7.2-external-plugin-authorization-bypass-local-code-execution
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-1236058.8 ALT—
———Hickory DNS hickory-proto 0.1 through 0.25.0-alpha.3 and hickory-net before 0.26.2 contain a DNSSEC validation bypass because the validator verifies an RRSIG against the DNSKEY of whatever name appears in its Signer's Name field without checking that this name is the zone containing the RRset. Attackers controlling any secure zone can produce valid signatures over arbitrary records in unrelated zones, which resolvers, recursors, and clients using DnssecDnsHandle accept as authenticated.12hCVE-2026-1235904.8 MÉD—
———Hickory DNS hickory-net 0.26.0-beta.1 before 0.26.2 and hickory-proto through 0.26.0-alpha.1 accept NSEC and NSEC3 records for DNSSEC nonexistence proofs when any other record with the same owner name passes signature validation. Attackers able to supply DNS responses can mix validly signed records with bogus same-name NSEC or NSEC3 records of different types in the authority section to forge nonexistence proofs.12hCVE-2026-1235386.6 MÉD—
———OpenAM before 16.1.4 does not verify that a signed SAML 1.x assertion or response was signed by the partner named as its issuer, accepting a signature from any certificate in OpenAM's keystore. An attacker holding such a private key, such as a trusted SAML 1.x partner, can forge assertions claiming another partner's issuer and sign in as that partner's users, including privileged ones.12hCVE-2026-173797.4 ALT27.9%
——8IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to bypass authentication and assign arbitrary roles due to improper verification of cryptographic signatures.1dCVE-2026-173019.8 CRÍ38.0%
——11IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an unauthenticated attacker to bypass authentication due to improper verification of a cryptographic signature.1dCVE-2026-1054596.8 MÉD11.4%
——3IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an attacker to gain unauthorized access to an organization due to improper verification of a cryptographic signature. A token is accepted without its signature being fully verified, which could allow an attacker to join an organization without a valid invitation.1d