Open redirect on affiliate page

Gemeldet auf March 20, 2026

An affiliate marketing tool used on our page enabled redirect to any website. An attacker could exploit this in a phishing campaign, redirecting from a legitimately looking URL to a malicious website.

Gemeldet durch Toshit Bharti

Trezor.io

Behobene Sicherheitslücken

Gemeldet durch Community. Untersucht. Gelöst. Weil deine Sicherheit nie optional ist.

Biometric Verification bypassed in Trezor Suite with external monitor
9. März 2026
Insufficient entropy on Trezor Model One with 12/18 words
6. Februar 2026
Bug in multisig verification
10. Januar 2026
Inability to cancel certain flows on pre-production firmware
31. Oktober 2025
Fix side-channel in BIP-39 mnemonic processing when unlocked
24. September 2025
Donjon's Trezor Safe 3 evaluation
12. November 2024