Vulnerabilities
3 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2025-26819 | Monero through 0.18.3.4 before ec74ff4 does not have response limits on HTTP server connections. Monero through 0.18.3.4 before ec74ff4 does not have response limits on HTTP server connections. NVD description · AI analysis pending | 7.5 | <1% |
| — | ||
| CVE-2020-26947 | monero-wallet-gui in Monero GUI before 0.17.1.0 includes the . monero-wallet-gui in Monero GUI before 0.17.1.0 includes the . directory in an embedded RPATH (with a preference ahead of /usr/lib), which allows local users to gain privileges via a Trojan horse library in the current working directory. NVD description · AI analysis pending | 7.8 | <1% |
| — | ||
| CVE-2018-3972 | An exploitable code execution vulnerability exists in the Levin deserialization functionality of the Epee library, as used in Monero 'Lithium Luna' (v0.12.2.0-m An exploitable code execution vulnerability exists in the Levin deserialization functionality of the Epee library, as used in Monero 'Lithium Luna' (v0.12.2.0-master-ffab6700) and other cryptocurrencies. A specially crafted network packet can cause a logic flaw, resulting in code execution. An attacker can send a packet to trigger this vulnerability. NVD description · AI analysis pending | 9.8 | 4% | PoC |
| — |