GO-2026-4511
NoneCVSS
—
EPSS
—
Published
Feb 24, 2026
CISA due date
—
The record
Go Ethereum Improperly Validates the ECIES Public Key in RLPx Handshake in github.com/ethereum/go-ethereum
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/ethereum/go-ethereum | 0 | 1.16.9 |
Related vulnerabilities
- CVE-2026-26315 go-ethereum (Geth) is a golang execution layer implementation of the Ethereum protocol. Same vulnerability
- GO-2026-4507 Go Ethereum affected by crash via malicious p2p message in github.com/ethereum/go-ethereum Also affects github.com/ethereum/go-ethereum
- GO-2026-4508 Go Ethereum affected by DoS via malicious p2p message in github.com/ethereum/go-ethereum Also affects github.com/ethereum/go-ethereum
- CVE-2026-26314 go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. Also affects github.com/ethereum/go-ethereum
- CVE-2026-26313 go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. Also affects github.com/ethereum/go-ethereum
- GO-2026-4314 High CPU usage leading to DoS via malicious p2p message in github.com/ethereum/go-ethereum Also affects github.com/ethereum/go-ethereum
- GO-2026-4315 DoS via malicious p2p message affecting a vulnerable node in… Also affects github.com/ethereum/go-ethereum
- CVE-2026-22862 go-ethereum is vulnerable to DoS via malicious p2p message affecting a vulnerable node Also affects github.com/ethereum/go-ethereum