Executive brief
Go Ethereum Improperly Validates the ECIES Public Key in RLPx Handshake in github.com/ethereum/go-ethereum
Affected products
- Go github.com/ethereum/go-ethereum
Junglewise Threat Intelligence
CVE-2026-26315: GO-2026-4511 - Go Ethereum Improperly Validates the ECIES Public Key in RLPx Handshake in github.com/ethereum/go-ethereum
CVE-2026-26315 · Severity: medium · CVSS 4 · Published 2026-02-24
Technologies: github.com/ethereum/go-ethereum (Go). Vendors: Go.
Related threats
- GO-2026-4507 - Go Ethereum affected by crash via malicious p2p message in github.com/ethereum/go-ethereum
- GO-2026-4508 - Go Ethereum affected by DoS via malicious p2p message in github.com/ethereum/go-ethereum
- GO-2026-4315 - DoS via malicious p2p message affecting a vulnerable node in github.com/ethereum/go-ethereum
- GO-2026-4314 - High CPU usage leading to DoS via malicious p2p message in github.com/ethereum/go-ethereum
- GO-2025-3436 - Go Ethereum vulnerable to DoS via malicious p2p message in github.com/ethereum/go-ethereum