Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2026-22862

26
FAUCET Score

CVE-2026-22862 is a high-severity vulnerability affecting go-ethereum (geth), an Ethereum protocol implementation, allowing a remote attacker to crash or shut down a vulnerable node with a specially crafted message. With a CVSS score of 7.5, this network-exploitable flaw requires no user interaction and has a high impact on availability. While no public exploit code or active exploitation has been observed, and community discussion is minimal, the vulnerability is addressed in geth version 1.16.8.

Impacted Technologies

VendorProductVersion(s)CPE
< 1.16.8CPE matchmatch criteria
cpe:2.3:a:ethereum:go_ethereum:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 4.0

7.1HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector
NETWORK
Attack Complexity
LOW
Attack Requirements
NONE
Privileges Required
LOW
User Interaction
NONE
VS Confidentiality
NONE
VS Integrity
NONE
VS Availability
HIGH
SS Confidentiality
NONE
SS Integrity
NONE
SS Availability
NONE
Exploit Maturity
NOT_DEFINED
CvssVersion
4.0

Exploit Intelligence

EPSS Score
0.64%
Probability of exploitation in next 30 days
EPSS Percentile
46.8%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0064 is in the 23rd percentile among its peer group of 51,506 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (2)

github_advisorypatch availablevia nvd_reference
View patch
gopatch availablevia ghsa
Product: github.com/ethereum/go-ethereumFixed in: 1.16.8

Vendor Advisories (1)

goGHSA-mr7q-c9w9-wh4hhigh

go-ethereum is vulnerable to DoS via malicious p2p message affecting a vulnerable node

Jan 13, 2026

References

github.com / ethereum/go-ethereum/commit/abeb78c647e354ed922726a1d719ac7bc64a07e2
Patch
github.com / ethereum/go-ethereum/security/advisories/GHSA-mr7q-c9w9-wh4h
Third Party Advisory