Vulnerabilities

TI-2026-18358 CVE-2026-22866 · GHSA-c6rr-7pmc-73wc

ENS DNSSEC Oracle Vulnerable to RSA Signature Forgery via Missing PKCS#1 v1.5 Padding Validation

MEDIUM 47

Ethereum Name Service (ENS) is a distributed, open, and extensible naming system based on the Ethereum blockchain.

CVSS 4.0LOW 2.7 Network No auth No interaction EPSS 0.00201 Published 2026-02-25 No fix listed CWE-347

TI-2023-20046 CVE-2023-38698 · GHSA-rrxv-q8m4-wch3

.eth registrar controller can shorten the duration of registered names

MEDIUM 62

Ethereum Name Service (ENS) is a distributed, open, and extensible naming system based on the Ethereum blockchain.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00848 Published 2023-08-04 Fixed in 0.0.22 CWE-190

TI-2020-04288 CVE-2020-5232 · GHSA-8f9f-pc5v-9r5h

Ethereum Name Service - Malicious takeover of previously owned ENS names

MEDIUM 40

A user who owns an ENS domain can set a trapdoor, allowing them to transfer ownership to another user, and later regain ownership without the new owners consent or awareness.

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.01181 Published 2020-01-30 Fixed in 0.4.0 CWE-285

Vulnerabilities

Filters

ENS DNSSEC Oracle Vulnerable to RSA Signature Forgery via Missing PKCS#1 v1.5 Padding Validation

.eth registrar controller can shorten the duration of registered names

Ethereum Name Service - Malicious takeover of previously owned ENS names