https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 04:40:15 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-106511 <p>MultiversX&#39;s multisig-improved (repository: mx-multisig-and-modules) reference implementation of their on-chain multisig smart contract system contains a vulnerability where a missing independent authorization check allows any account with the Proposer role to perform explicitly barred actions. This vulnerability allows the Proposer role to move funds alone, draining 100% of a contract&#39;s EGLD/ESDT balance in two transactions with zero signatures.</p> <p>MultiversX&#39;s multisig-improved (repository: mx-multisig-and-modules) reference implementation of their on-chain multisig smart contract system contains a vulnerability where a missing independent authorization check allows any account with the Proposer role to perform explicitly barred actions. This vulnerability allows the Proposer role to move funds alone, draining 100% of a contract&#39;s EGLD/ESDT balance in two transactions with zero signatures.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-106511 https://vulnerability.circl.lu/vuln/ghsa-vxx8-8p7v-9mvp <p>MultiversX&#39;s multisig-improved (repository: mx-multisig-and-modules) reference implementation of their on-chain multisig smart contract system contains a vulnerability where a missing independent authorization check allows any account with the Proposer role to perform explicitly barred actions. This vulnerability allows the Proposer role to move funds alone, draining 100% of a contract&#39;s EGLD/ESDT balance in two transactions with zero signatures.</p> <p>MultiversX&#39;s multisig-improved (repository: mx-multisig-and-modules) reference implementation of their on-chain multisig smart contract system contains a vulnerability where a missing independent authorization check allows any account with the Proposer role to perform explicitly barred actions. This vulnerability allows the Proposer role to move funds alone, draining 100% of a contract&#39;s EGLD/ESDT balance in two transactions with zero signatures.</p> https://vulnerability.circl.lu/vuln/ghsa-vxx8-8p7v-9mvp