CVE-2026-61604Published
ixo Blockchain x/bonds DID-resolved payer drain + x/entity ICA authorization bypass
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-61604 · Microsoft / collected KEV context
cve-program · CVE-2026-61604
euvd · EUVD-2026-86330
nvd · CVE-2026-61604
osv · GHSA-w3rp-4cm2-4wgc
- https://github.com/ixofoundation/ixo-blockchain/security/advisories/GHSA-w3rp-4cm2-4wgc
- https://nvd.nist.gov/vuln/detail/CVE-2026-61604
- https://github.com/ixofoundation/ixo-blockchain/pull/534
- https://github.com/ixofoundation/ixo-blockchain/commit/09a51da9a512779d1fb16c9a11e113f760a70921
- https://github.com/ixofoundation/ixo-blockchain
- https://github.com/ixofoundation/ixo-blockchain/releases/tag/v8.0.0
osv · GO-2026-6595
- https://github.com/ixofoundation/ixo-blockchain/security/advisories/GHSA-w3rp-4cm2-4wgc
- https://nvd.nist.gov/vuln/detail/CVE-2026-61604
- https://github.com/ixofoundation/ixo-blockchain/commit/09a51da9a512779d1fb16c9a11e113f760a70921
- https://github.com/ixofoundation/ixo-blockchain/pull/534
- https://github.com/ixofoundation/ixo-blockchain/releases/tag/v8.0.0
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.