CVE-2026-22866: Improper Verification of Cryptographic Signature

Ethereum Name Service ENS is a distributed, open, and extensible naming system based on the Ethereum blockchain. In versions 1.6.2 and prior, the RSASHA256Algorithm and RSASHA1Algorithm contracts fail to validate PKCS1 v1.5 padding structure when verifying RSA signatures. The contracts only check...

PT-2023-26562

Name of the Vulnerable Software and Affected Versions Ethereum Name Service ENS versions prior to 0.0.22 Description The issue is related to an integer overflow in the renew function, which could allow an attacker-controlled controller to reduce the expiration time of existing domains. This could...