Spesmilo vulnerabilities
We track 2 vulnerabilities in Spesmilo products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 27, 2026.
2vulnerabilities
0critical
2high
0exploited
8.0average CVSS score
Latest Spesmilo vulnerabilities
- 8.4 High severity
electrum: Improper Verification of Cryptographic Signature
Electrum 4.6.0 before 4.7.2 contains an authorization bypass in the external plugin loader, which executes a plugin's __init__.py module when the plugin is marked enabled in the config file, without verifying its plugin-password signature. A rogue local proces
- 7.5 High severity
electrum: Improper Verification of Cryptographic Signature
Electrum before 4.8.3 fails to verify signatures of wallet-owned inputs in unconfirmed mempool transactions, allowing malicious servers to replace a just-broadcast transaction with a conflicting one. Attackers can swallow the user's transaction and display an