https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-08T04:40:15.810088+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-106511 fkie_cve-2026-106511 2026-10-08T04:40:15.828786+00:00

MultiversX's multisig-improved (repository: mx-multisig-and-modules) reference implementation of their on-chain multisig smart contract system contains a vulnerability where a missing independent authorization check allows any account with the Proposer role to perform explicitly barred actions. This vulnerability allows the Proposer role to move funds alone, draining 100% of a contract's EGLD/ESDT balance in two transactions with zero signatures.

 https://vulnerability.circl.lu/vuln/ghsa-vxx8-8p7v-9mvp GHSA-vxx8-8p7v-9mvp 2026-10-08T04:40:15.828953+00:00

MultiversX's multisig-improved (repository: mx-multisig-and-modules) reference implementation of their on-chain multisig smart contract system contains a vulnerability where a missing independent authorization check allows any account with the Proposer role to perform explicitly barred actions. This vulnerability allows the Proposer role to move funds alone, draining 100% of a contract's EGLD/ESDT balance in two transactions with zero signatures.