Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. Prior to version 1.17.0, an attacker can cause high memory usage by sending a specially-crafted p2p message. The issue is resolved in the v1.17.0 release.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-26313 go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. Prior to version 1.17.0, an attacker can cause high memory usage by sending a … https://www.cve.org/CVERecord?id=CVE-2026-26313
Post summary
A CVE‑2026‑26313 vulnerability in go‑ethereum allows memory exhaustion prior to version 1.17.0; no PoC, exploit, patch, or active exploitation is reported.
🔐 go-ethereum CVE-2026-26313 취약점 공개 — v1.17.0 패치 필수 리소스 제한 없는 할당 버그 → 노드 DoS 공격 가능 야생 익스플로잇 보고는 없으나 취약 버전 노드 긴급 업데이트 권고 Geth 노드 운영자라면 즉시 확인
Post summary
A newly disclosed go‑ethereum CVE‑2026‑26313 unbounded allocation bug can cause node DoS, requiring an urgent patch to v1.17.0; no active exploitation has been reported.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | ethereum | go_ethereum | - | - | - |