Skip to content
OpenAdvisories

Package · Debian

electrum

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.4
    CVE-2026-117602

    Electrum before 4.7.2 External Plugin Authorization Bypass Local Code Execution

    Electrum 4.6.0 before 4.7.2 contains an authorization bypass in the external plugin loader, which executes a plugin's __init__.py module when the plugin is marked enabled in the config file, without verifying its plugin-password signature. A rogue local proce…

    spesmilo electrum electrum Debian
  • High 7.5
    CVE-2026-117601

    Electrum before 4.8.3 Missing Signature Verification of Mempool Transactions

    Electrum before 4.8.3 fails to verify signatures of wallet-owned inputs in unconfirmed mempool transactions, allowing malicious servers to replace a just-broadcast transaction with a conflicting one. Attackers can swallow the user's transaction and display an…

    spesmilo electrum electrum electrum Debian PyPI