CVE-2026-117601

A flaw was found in electrum. A connected malicious server can exploit this vulnerability to cause theft of funds by replacing a legitimate transaction with a fraudulent transfer. Because the application fails to verify cryptographic signatures on unconfirmed transactions, the attacker can displa...