PT-2026-20902 · Unknown+2 · Go-Ethereum+2

Revofusion · Published 2026-02-18 · Updated 2026-03-03 · CVE-2026-26313

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions go-ethereum (geth) versions prior to 1.17.0

Description A specially crafted p2p message can lead to high memory usage. The issue affects the Ethereum protocol implementation.

Recommendations Update to version 1.17.0 or later.

Exploit

Fix

DoS

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2026-26313

GHSA-689V-6XWF-5JF3

GO-2026-4508

SUSE-SU-2026:0757-1

Affected Products

Ethereum

Geth

Go-Ethereum

References · 117

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/26xxx/CVE-2026-26313.json · Exploit
• https://github.com/ethereum/go-ethereum/security/advisories/GHSA-689v-6xwf-5jf3 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2026-4508 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-26313 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:0757-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-26313 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-689v-6xwf-5jf3 · Vendor Advisory
• https://github.com/ethereum/go-ethereum/releases/tag/v1.17.0 · Note
• https://github.com/ethereum/go-ethereum · Note
• https://suse.com/security/cve/CVE-2026-26205 · Note
• https://suse.com/security/cve/CVE-2026-23989 · Note
• https://suse.com/security/cve/CVE-2017-18916 · Note
• https://suse.com/security/cve/CVE-2023-43636 · Note
• https://suse.com/security/cve/CVE-2026-23633 · Note
• https://suse.com/security/cve/CVE-2026-23992 · Note