CVE-2026-40092 | nimiq core-rs-albatross up to 1.3.x Kademlia from_bytes signature return value

A vulnerability was found in nimiq core-rs-albatross up to 1.3.x. It has been classified as problematic. This affects the function Ed25519signature::from_bytes of the component Kademlia Handler. Performing a manipulation of the argument signature results in unchecked return value.

This vulnerability is identified as CVE-2026-40092. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is recommended.