{"schema_version":"2","view":"grouped","data":[{"id":72190,"cve_ids":["CVE-2026-104437"],"payload":{"kind":"advisory","title":"Zebra before 4.4.0 Consensus Split via SIGHASH_SINGLE Missing-Output Handling","summary":"Zebra before 4.4.0 contains a consensus divergence vulnerability in V5 transparent signature verification, computing a ZIP-244 digest for SIGHASH_SINGLE inputs lacking corresponding outputs instead of failing. Attackers can craft V5 transactions with fewer outputs than inputs that Zebra accepts and templates via getblocktemplate, producing blocks zcashd rejects.","evidence":"cve:CVE-2026-104437","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-104437","aliases":["CVE-2026-104437"],"metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":8.3,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"HIGH","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.4,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"4.4.0","versionType":"semver"},{"status":"unaffected","version":"4.4.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-06T02:42:57.596Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-cwfq-rfcr-8hmp","https://www.vulncheck.com/advisories/zebra-before-4.4.0-consensus-split-via-sighash-single-missing-output-handling"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104437","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-06T02:42:33.915856Z"}}}],"references":[{"url":"https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-cwfq-rfcr-8hmp","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T02:42:57.596Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:13.855Z"}}},"related_cves":[{"value":"CVE-2026-104437","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:ccb6a735-3980-4f92-bdca-bf33bdf825c3","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"critical","linked_cves":[{"cve":"CVE-2026-104437","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N"}],"products":[{"name":{"value":"zebrad","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"critical","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-cwfq-rfcr-8hmp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":2,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104437","advisory_id":"ccb6a735-3980-4f92-bdca-bf33bdf825c3","event_types":["advisory"],"published_at":"2026-10-26T00:18:30.146511+00:00","technologies":["core-cve","zebra"],"context_update":true,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:13.855+00:00","detail_url":"/advisories/advisory%3Accb6a735-3980-4f92-bdca-bf33bdf825c3","group":{"id":"advisory:ccb6a735-3980-4f92-bdca-bf33bdf825c3","revision":2,"primary_event_id":72834,"change":"context","superseded_by":[],"changed":{"id":72834,"cve_ids":["CVE-2026-104437"],"payload":{"kind":"advisory","title":"Zebra before 4.4.0 Consensus Split via SIGHASH_SINGLE Missing-Output Handling","summary":"Zebra before 4.4.0 contains a consensus divergence vulnerability in V5 transparent signature verification, computing a ZIP-244 digest for SIGHASH_SINGLE inputs lacking corresponding outputs instead of failing. Attackers can craft V5 transactions with fewer outputs than inputs that Zebra accepts and templates via getblocktemplate, producing blocks zcashd rejects.","evidence":"cve:CVE-2026-104437","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-104437","aliases":["CVE-2026-104437"],"metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":8.3,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"HIGH","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.4,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"4.4.0","versionType":"semver"},{"status":"unaffected","version":"4.4.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-06T02:42:57.596Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-cwfq-rfcr-8hmp","https://www.vulncheck.com/advisories/zebra-before-4.4.0-consensus-split-via-sighash-single-missing-output-handling"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104437","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-06T02:42:33.915856Z"}}}],"references":[{"url":"https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-cwfq-rfcr-8hmp","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T02:42:57.596Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:13.855Z"}}},"related_cves":[{"value":"CVE-2026-104437","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:ccb6a735-3980-4f92-bdca-bf33bdf825c3","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"critical","linked_cves":[{"cve":"CVE-2026-104437","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N"}],"products":[{"name":{"value":"zebrad","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"critical","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-cwfq-rfcr-8hmp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":2,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104437","advisory_id":"ccb6a735-3980-4f92-bdca-bf33bdf825c3","event_types":["advisory"],"published_at":"2026-10-26T00:18:30.146511+00:00","technologies":["core-cve","zebra"],"context_update":true,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:13.855+00:00","detail_url":"/events/72834"},"members":[{"id":72834,"cve_ids":["CVE-2026-104437"],"payload":{"kind":"advisory","title":"Zebra before 4.4.0 Consensus Split via SIGHASH_SINGLE Missing-Output Handling","summary":"Zebra before 4.4.0 contains a consensus divergence vulnerability in V5 transparent signature verification, computing a ZIP-244 digest for SIGHASH_SINGLE inputs lacking corresponding outputs instead of failing. Attackers can craft V5 transactions with fewer outputs than inputs that Zebra accepts and templates via getblocktemplate, producing blocks zcashd rejects.","evidence":"cve:CVE-2026-104437","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-104437","aliases":["CVE-2026-104437"],"metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":8.3,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"HIGH","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.4,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"4.4.0","versionType":"semver"},{"status":"unaffected","version":"4.4.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-06T02:42:57.596Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-cwfq-rfcr-8hmp","https://www.vulncheck.com/advisories/zebra-before-4.4.0-consensus-split-via-sighash-single-missing-output-handling"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104437","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-06T02:42:33.915856Z"}}}],"references":[{"url":"https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-cwfq-rfcr-8hmp","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T02:42:57.596Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:13.855Z"}}},"related_cves":[{"value":"CVE-2026-104437","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:ccb6a735-3980-4f92-bdca-bf33bdf825c3","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"critical","linked_cves":[{"cve":"CVE-2026-104437","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N"}],"products":[{"name":{"value":"zebrad","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"critical","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-cwfq-rfcr-8hmp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":2,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104437","advisory_id":"ccb6a735-3980-4f92-bdca-bf33bdf825c3","event_types":["advisory"],"published_at":"2026-10-26T00:18:30.146511+00:00","technologies":["core-cve","zebra"],"context_update":true,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:13.855+00:00","detail_url":"/events/72834"}]}},{"id":72188,"cve_ids":["CVE-2026-104435"],"payload":{"kind":"advisory","title":"Zebra 4.4.0 Consensus Divergence via V5 SIGHASH_SINGLE Without Output","summary":"Zebra zebrad 4.4.0 and zebra-script 6.0.0 fail to enforce a ZIP-244 consensus rule, accepting V5 transparent inputs signed with SIGHASH_SINGLE that lack a corresponding output. Attackers can broadcast crafted V5 transactions with more inputs than outputs that Zebra accepts but zcashd rejects, causing a network consensus split.","evidence":"cve:CVE-2026-104435","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"zebra","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-104435","aliases":["CVE-2026-104435"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.4,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"4.4.0","lessThan":"4.4.1","versionType":"semver"},{"status":"unaffected","version":"4.4.1","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"},{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"6.0.0","lessThan":"6.0.1","versionType":"semver"},{"status":"unaffected","version":"6.0.1","versionType":"semver"}],"packageURL":"pkg:cargo/zebra-script","defaultStatus":"unaffected"}],"modified":"2026-10-02T15:16:42.729Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-pvmv-cwg8-v6c8","https://www.vulncheck.com/advisories/zebra-4.4.0-consensus-divergence-via-v5-sighash-single-without-output"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104435","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-02T15:16:28.895399Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-02T15:16:42.729Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:12.487Z"}}},"related_cves":[{"value":"CVE-2026-104435","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:d86b5aa9-660f-4a45-91c9-f7fc36f31454","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"critical","linked_cves":[{"cve":"CVE-2026-104435","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H"}],"products":[{"name":{"value":"zebrad","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.4.1","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"zebra-script","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"6.0.1","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"critical","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-pvmv-cwg8-v6c8","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":2,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104435","advisory_id":"d86b5aa9-660f-4a45-91c9-f7fc36f31454","event_types":["advisory"],"published_at":"2026-10-26T00:18:29.367286+00:00","technologies":["core-cve","zebra"],"context_update":true,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:12.487+00:00","detail_url":"/advisories/advisory%3Ad86b5aa9-660f-4a45-91c9-f7fc36f31454","group":{"id":"advisory:d86b5aa9-660f-4a45-91c9-f7fc36f31454","revision":2,"primary_event_id":72832,"change":"context","superseded_by":[],"changed":{"id":72832,"cve_ids":["CVE-2026-104435"],"payload":{"kind":"advisory","title":"Zebra 4.4.0 Consensus Divergence via V5 SIGHASH_SINGLE Without Output","summary":"Zebra zebrad 4.4.0 and zebra-script 6.0.0 fail to enforce a ZIP-244 consensus rule, accepting V5 transparent inputs signed with SIGHASH_SINGLE that lack a corresponding output. Attackers can broadcast crafted V5 transactions with more inputs than outputs that Zebra accepts but zcashd rejects, causing a network consensus split.","evidence":"cve:CVE-2026-104435","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"zebra","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-104435","aliases":["CVE-2026-104435"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.4,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"4.4.0","lessThan":"4.4.1","versionType":"semver"},{"status":"unaffected","version":"4.4.1","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"},{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"6.0.0","lessThan":"6.0.1","versionType":"semver"},{"status":"unaffected","version":"6.0.1","versionType":"semver"}],"packageURL":"pkg:cargo/zebra-script","defaultStatus":"unaffected"}],"modified":"2026-10-02T15:16:42.729Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-pvmv-cwg8-v6c8","https://www.vulncheck.com/advisories/zebra-4.4.0-consensus-divergence-via-v5-sighash-single-without-output"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104435","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-02T15:16:28.895399Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-02T15:16:42.729Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:12.487Z"}}},"related_cves":[{"value":"CVE-2026-104435","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:d86b5aa9-660f-4a45-91c9-f7fc36f31454","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"critical","linked_cves":[{"cve":"CVE-2026-104435","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H"}],"products":[{"name":{"value":"zebrad","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.4.1","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"zebra-script","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"6.0.1","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"critical","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-pvmv-cwg8-v6c8","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":2,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104435","advisory_id":"d86b5aa9-660f-4a45-91c9-f7fc36f31454","event_types":["advisory"],"published_at":"2026-10-26T00:18:29.367286+00:00","technologies":["core-cve","zebra"],"context_update":true,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:12.487+00:00","detail_url":"/events/72832"},"members":[{"id":72832,"cve_ids":["CVE-2026-104435"],"payload":{"kind":"advisory","title":"Zebra 4.4.0 Consensus Divergence via V5 SIGHASH_SINGLE Without Output","summary":"Zebra zebrad 4.4.0 and zebra-script 6.0.0 fail to enforce a ZIP-244 consensus rule, accepting V5 transparent inputs signed with SIGHASH_SINGLE that lack a corresponding output. Attackers can broadcast crafted V5 transactions with more inputs than outputs that Zebra accepts but zcashd rejects, causing a network consensus split.","evidence":"cve:CVE-2026-104435","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"zebra","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-104435","aliases":["CVE-2026-104435"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.4,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"4.4.0","lessThan":"4.4.1","versionType":"semver"},{"status":"unaffected","version":"4.4.1","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"},{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"6.0.0","lessThan":"6.0.1","versionType":"semver"},{"status":"unaffected","version":"6.0.1","versionType":"semver"}],"packageURL":"pkg:cargo/zebra-script","defaultStatus":"unaffected"}],"modified":"2026-10-02T15:16:42.729Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-pvmv-cwg8-v6c8","https://www.vulncheck.com/advisories/zebra-4.4.0-consensus-divergence-via-v5-sighash-single-without-output"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104435","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-02T15:16:28.895399Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-02T15:16:42.729Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:12.487Z"}}},"related_cves":[{"value":"CVE-2026-104435","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:d86b5aa9-660f-4a45-91c9-f7fc36f31454","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"critical","linked_cves":[{"cve":"CVE-2026-104435","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H"}],"products":[{"name":{"value":"zebrad","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.4.1","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"zebra-script","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"6.0.1","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"critical","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-pvmv-cwg8-v6c8","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":2,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104435","advisory_id":"d86b5aa9-660f-4a45-91c9-f7fc36f31454","event_types":["advisory"],"published_at":"2026-10-26T00:18:29.367286+00:00","technologies":["core-cve","zebra"],"context_update":true,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:12.487+00:00","detail_url":"/events/72832"}]}},{"id":20677,"cve_ids":["CVE-2026-109365"],"payload":{"kind":"advisory","title":"Zebra before 6.4.0 Denial of Service via Same-Hash Forged Block Bodies","summary":"Zebra before 6.4.0 contains an uncontrolled resource consumption vulnerability that allows unauthenticated peers to force full proof verification by serving forged block bodies with valid header hashes. Attackers can flip authorizing-only bytes such as a coinbase scriptSig, wasting Sapling, Orchard, and Ironwood proof verification without penalty and stalling sync for 67 seconds.","evidence":"cve:CVE-2026-109365","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-109365","aliases":["CVE-2026-109365"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":6.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.7,"attackVector":"NETWORK","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"6.4.0","versionType":"semver"},{"status":"unaffected","version":"6.4.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-13T17:28:36.728Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-3c94-hf7p-g5mf","https://www.vulncheck.com/advisories/zebra-before-6.4.0-denial-of-service-via-same-hash-forged-block-bodies"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-109365","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-13T17:28:19.145611Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-13T17:28:36.728Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-12T16:05:42.923Z"}}},"related_cves":[{"value":"CVE-2026-109365","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:5917f281-95f0-4386-a7d7-99fd1de77394","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-109365","advisory_id":"5917f281-95f0-4386-a7d7-99fd1de77394","event_types":["advisory"],"published_at":"2026-10-25T05:30:29.515706+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-12T16:05:42.923+00:00","detail_url":"/advisories/advisory%3A5917f281-95f0-4386-a7d7-99fd1de77394","group":{"id":"advisory:5917f281-95f0-4386-a7d7-99fd1de77394","revision":1,"primary_event_id":20537,"change":"published","superseded_by":[],"changed":{"id":20537,"cve_ids":["CVE-2026-109365"],"payload":{"kind":"advisory","title":"Zebra before 6.4.0 Denial of Service via Same-Hash Forged Block Bodies","summary":"Zebra before 6.4.0 contains an uncontrolled resource consumption vulnerability that allows unauthenticated peers to force full proof verification by serving forged block bodies with valid header hashes. Attackers can flip authorizing-only bytes such as a coinbase scriptSig, wasting Sapling, Orchard, and Ironwood proof verification without penalty and stalling sync for 67 seconds.","evidence":"cve:CVE-2026-109365","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-109365","aliases":["CVE-2026-109365"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":6.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.7,"attackVector":"NETWORK","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"6.4.0","versionType":"semver"},{"status":"unaffected","version":"6.4.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-13T17:28:36.728Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-3c94-hf7p-g5mf","https://www.vulncheck.com/advisories/zebra-before-6.4.0-denial-of-service-via-same-hash-forged-block-bodies"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-109365","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-13T17:28:19.145611Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-13T17:28:36.728Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-12T16:05:42.923Z"}}},"related_cves":[{"value":"CVE-2026-109365","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:5917f281-95f0-4386-a7d7-99fd1de77394","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-109365","advisory_id":"5917f281-95f0-4386-a7d7-99fd1de77394","event_types":["advisory"],"published_at":"2026-10-25T05:30:29.515706+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-12T16:05:42.923+00:00","detail_url":"/events/20537"},"members":[{"id":20537,"cve_ids":["CVE-2026-109365"],"payload":{"kind":"advisory","title":"Zebra before 6.4.0 Denial of Service via Same-Hash Forged Block Bodies","summary":"Zebra before 6.4.0 contains an uncontrolled resource consumption vulnerability that allows unauthenticated peers to force full proof verification by serving forged block bodies with valid header hashes. Attackers can flip authorizing-only bytes such as a coinbase scriptSig, wasting Sapling, Orchard, and Ironwood proof verification without penalty and stalling sync for 67 seconds.","evidence":"cve:CVE-2026-109365","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-109365","aliases":["CVE-2026-109365"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":6.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.7,"attackVector":"NETWORK","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"6.4.0","versionType":"semver"},{"status":"unaffected","version":"6.4.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-13T17:28:36.728Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-3c94-hf7p-g5mf","https://www.vulncheck.com/advisories/zebra-before-6.4.0-denial-of-service-via-same-hash-forged-block-bodies"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-109365","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-13T17:28:19.145611Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-13T17:28:36.728Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-12T16:05:42.923Z"}}},"related_cves":[{"value":"CVE-2026-109365","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:5917f281-95f0-4386-a7d7-99fd1de77394","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-109365","advisory_id":"5917f281-95f0-4386-a7d7-99fd1de77394","event_types":["advisory"],"published_at":"2026-10-25T05:30:29.515706+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-12T16:05:42.923+00:00","detail_url":"/events/20537"}]}},{"id":20633,"cve_ids":["CVE-2026-109364"],"payload":{"kind":"advisory","title":"Zebra 2.3.0 before 6.4.0 Peer Ban Bypass via Exact-IP Keying","summary":"Zebra 2.3.0 before 6.4.0 contains a protection mechanism failure that allows unauthenticated peers to evade bans because bans and misbehavior scores are keyed on exact IP addresses. Attackers can reconnect from fresh IPv6 addresses in their /64 allocation or flush the 20,000-entry FIFO ban list to restore access for banned peers.","evidence":"cve:CVE-2026-109364","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-109364","aliases":["CVE-2026-109364"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"2.3.0","lessThan":"6.4.0","versionType":"semver"},{"status":"unaffected","version":"6.4.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-13T16:53:12.902Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-jhpp-8h75-7pv5","https://www.vulncheck.com/advisories/zebra-2.3.0-before-6.4.0-peer-ban-bypass-via-exact-ip-keying"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-109364","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-13T16:22:08.022394Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-13T16:53:12.902Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-12T16:05:42.223Z"}}},"related_cves":[{"value":"CVE-2026-109364","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:af89d82d-2cce-4cf4-bd2e-2634d4fa59bb","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-109364","advisory_id":"af89d82d-2cce-4cf4-bd2e-2634d4fa59bb","event_types":["advisory"],"published_at":"2026-10-25T05:29:16.63475+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-12T16:05:42.223+00:00","detail_url":"/advisories/advisory%3Aaf89d82d-2cce-4cf4-bd2e-2634d4fa59bb","group":{"id":"advisory:af89d82d-2cce-4cf4-bd2e-2634d4fa59bb","revision":1,"primary_event_id":20494,"change":"published","superseded_by":[],"changed":{"id":20494,"cve_ids":["CVE-2026-109364"],"payload":{"kind":"advisory","title":"Zebra 2.3.0 before 6.4.0 Peer Ban Bypass via Exact-IP Keying","summary":"Zebra 2.3.0 before 6.4.0 contains a protection mechanism failure that allows unauthenticated peers to evade bans because bans and misbehavior scores are keyed on exact IP addresses. Attackers can reconnect from fresh IPv6 addresses in their /64 allocation or flush the 20,000-entry FIFO ban list to restore access for banned peers.","evidence":"cve:CVE-2026-109364","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-109364","aliases":["CVE-2026-109364"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"2.3.0","lessThan":"6.4.0","versionType":"semver"},{"status":"unaffected","version":"6.4.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-13T16:53:12.902Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-jhpp-8h75-7pv5","https://www.vulncheck.com/advisories/zebra-2.3.0-before-6.4.0-peer-ban-bypass-via-exact-ip-keying"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-109364","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-13T16:22:08.022394Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-13T16:53:12.902Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-12T16:05:42.223Z"}}},"related_cves":[{"value":"CVE-2026-109364","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:af89d82d-2cce-4cf4-bd2e-2634d4fa59bb","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-109364","advisory_id":"af89d82d-2cce-4cf4-bd2e-2634d4fa59bb","event_types":["advisory"],"published_at":"2026-10-25T05:29:16.63475+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-12T16:05:42.223+00:00","detail_url":"/events/20494"},"members":[{"id":20494,"cve_ids":["CVE-2026-109364"],"payload":{"kind":"advisory","title":"Zebra 2.3.0 before 6.4.0 Peer Ban Bypass via Exact-IP Keying","summary":"Zebra 2.3.0 before 6.4.0 contains a protection mechanism failure that allows unauthenticated peers to evade bans because bans and misbehavior scores are keyed on exact IP addresses. Attackers can reconnect from fresh IPv6 addresses in their /64 allocation or flush the 20,000-entry FIFO ban list to restore access for banned peers.","evidence":"cve:CVE-2026-109364","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-109364","aliases":["CVE-2026-109364"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"2.3.0","lessThan":"6.4.0","versionType":"semver"},{"status":"unaffected","version":"6.4.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-13T16:53:12.902Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-jhpp-8h75-7pv5","https://www.vulncheck.com/advisories/zebra-2.3.0-before-6.4.0-peer-ban-bypass-via-exact-ip-keying"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-109364","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-13T16:22:08.022394Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-13T16:53:12.902Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-12T16:05:42.223Z"}}},"related_cves":[{"value":"CVE-2026-109364","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:af89d82d-2cce-4cf4-bd2e-2634d4fa59bb","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-109364","advisory_id":"af89d82d-2cce-4cf4-bd2e-2634d4fa59bb","event_types":["advisory"],"published_at":"2026-10-25T05:29:16.63475+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-12T16:05:42.223+00:00","detail_url":"/events/20494"}]}},{"id":20529,"cve_ids":["CVE-2026-109363"],"payload":{"kind":"advisory","title":"Zebra 6.4.0 before 6.4.2 Denial of Service via Malformed v6 Transaction","summary":"ZcashFoundation Zebra 6.4.0 before 6.4.2 parses version 6 transactions carrying a pre-NU6.3 consensus branch ID, but the size computation during UnminedTx construction treats re-serialization of the Orchard bundle as infallible, so the resulting error trips an expect that aborts zebrad. Unauthenticated peers can send a single pre-handshake tx message to crash the node, and can repeat this after each restart.","evidence":"cve:CVE-2026-109363","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-109363","aliases":["CVE-2026-109363"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"6.4.0","lessThan":"6.4.2","versionType":"semver"},{"status":"unaffected","version":"6.4.2","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-13T16:22:00.063Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-h5rr-8pqv-grp9","https://github.com/ZcashFoundation/zebra/commit/008abac5c99e872f283450d596d95e37851df49a","https://www.vulncheck.com/advisories/zebra-6.4.0-before-6.4.2-denial-of-service-via-malformed-v6-transaction"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-109363","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-13T16:21:21.592601Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-13T16:22:00.063Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-12T16:05:41.576Z"}}},"related_cves":[{"value":"CVE-2026-109363","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:094bc25c-8120-4b6a-b17d-64eb3d2305f4","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-109363","advisory_id":"094bc25c-8120-4b6a-b17d-64eb3d2305f4","event_types":["advisory"],"published_at":"2026-10-25T05:27:06.441092+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-12T16:05:41.576+00:00","detail_url":"/advisories/advisory%3A094bc25c-8120-4b6a-b17d-64eb3d2305f4","group":{"id":"advisory:094bc25c-8120-4b6a-b17d-64eb3d2305f4","revision":1,"primary_event_id":20392,"change":"published","superseded_by":[],"changed":{"id":20392,"cve_ids":["CVE-2026-109363"],"payload":{"kind":"advisory","title":"Zebra 6.4.0 before 6.4.2 Denial of Service via Malformed v6 Transaction","summary":"ZcashFoundation Zebra 6.4.0 before 6.4.2 parses version 6 transactions carrying a pre-NU6.3 consensus branch ID, but the size computation during UnminedTx construction treats re-serialization of the Orchard bundle as infallible, so the resulting error trips an expect that aborts zebrad. Unauthenticated peers can send a single pre-handshake tx message to crash the node, and can repeat this after each restart.","evidence":"cve:CVE-2026-109363","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-109363","aliases":["CVE-2026-109363"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"6.4.0","lessThan":"6.4.2","versionType":"semver"},{"status":"unaffected","version":"6.4.2","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-13T16:22:00.063Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-h5rr-8pqv-grp9","https://github.com/ZcashFoundation/zebra/commit/008abac5c99e872f283450d596d95e37851df49a","https://www.vulncheck.com/advisories/zebra-6.4.0-before-6.4.2-denial-of-service-via-malformed-v6-transaction"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-109363","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-13T16:21:21.592601Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-13T16:22:00.063Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-12T16:05:41.576Z"}}},"related_cves":[{"value":"CVE-2026-109363","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:094bc25c-8120-4b6a-b17d-64eb3d2305f4","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-109363","advisory_id":"094bc25c-8120-4b6a-b17d-64eb3d2305f4","event_types":["advisory"],"published_at":"2026-10-25T05:27:06.441092+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-12T16:05:41.576+00:00","detail_url":"/events/20392"},"members":[{"id":20392,"cve_ids":["CVE-2026-109363"],"payload":{"kind":"advisory","title":"Zebra 6.4.0 before 6.4.2 Denial of Service via Malformed v6 Transaction","summary":"ZcashFoundation Zebra 6.4.0 before 6.4.2 parses version 6 transactions carrying a pre-NU6.3 consensus branch ID, but the size computation during UnminedTx construction treats re-serialization of the Orchard bundle as infallible, so the resulting error trips an expect that aborts zebrad. Unauthenticated peers can send a single pre-handshake tx message to crash the node, and can repeat this after each restart.","evidence":"cve:CVE-2026-109363","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-109363","aliases":["CVE-2026-109363"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"6.4.0","lessThan":"6.4.2","versionType":"semver"},{"status":"unaffected","version":"6.4.2","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-13T16:22:00.063Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-h5rr-8pqv-grp9","https://github.com/ZcashFoundation/zebra/commit/008abac5c99e872f283450d596d95e37851df49a","https://www.vulncheck.com/advisories/zebra-6.4.0-before-6.4.2-denial-of-service-via-malformed-v6-transaction"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-109363","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-13T16:21:21.592601Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-13T16:22:00.063Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-12T16:05:41.576Z"}}},"related_cves":[{"value":"CVE-2026-109363","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:094bc25c-8120-4b6a-b17d-64eb3d2305f4","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-109363","advisory_id":"094bc25c-8120-4b6a-b17d-64eb3d2305f4","event_types":["advisory"],"published_at":"2026-10-25T05:27:06.441092+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-12T16:05:41.576+00:00","detail_url":"/events/20392"}]}},{"id":17197,"cve_ids":["CVE-2026-109366"],"payload":{"kind":"advisory","title":"Zebra before 6.4.0 Gossiped Block Drop via Forged Coinbase scriptSig Height","summary":"Zebra before 6.4.0 contains an improper integrity validation vulnerability in the inbound gossip download path that allows unauthenticated peers to force dropping of new blocks without penalty. Attackers can serve a real block with a coinbase scriptSig rewritten to height 1, which keeps the ZIP-244 block hash, triggering a behind-tip drop before consensus validation and delaying tip discovery for mining backends.","evidence":"cve:CVE-2026-109366","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-109366","aliases":["CVE-2026-109366"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":6.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.7,"attackVector":"NETWORK","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"6.4.0","versionType":"semver"},{"status":"unaffected","version":"6.4.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-12T16:05:43.620Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-4f6v-mj46-gxg3","https://www.vulncheck.com/advisories/zebra-before-6.4.0-gossiped-block-drop-via-forged-coinbase-scriptsig-height"],"provider_metadata":{"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-12T16:05:43.620Z"}}},"related_cves":[{"value":"CVE-2026-109366","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:5d3c45c4-cfab-419a-819a-8d8c687c7bcb","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-109366","advisory_id":"5d3c45c4-cfab-419a-819a-8d8c687c7bcb","event_types":["advisory"],"published_at":"2026-10-25T01:27:13.729457+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-12T16:05:43.62+00:00","detail_url":"/advisories/advisory%3A5d3c45c4-cfab-419a-819a-8d8c687c7bcb","group":{"id":"advisory:5d3c45c4-cfab-419a-819a-8d8c687c7bcb","revision":1,"primary_event_id":17087,"change":"published","superseded_by":[],"changed":{"id":17087,"cve_ids":["CVE-2026-109366"],"payload":{"kind":"advisory","title":"Zebra before 6.4.0 Gossiped Block Drop via Forged Coinbase scriptSig Height","summary":"Zebra before 6.4.0 contains an improper integrity validation vulnerability in the inbound gossip download path that allows unauthenticated peers to force dropping of new blocks without penalty. Attackers can serve a real block with a coinbase scriptSig rewritten to height 1, which keeps the ZIP-244 block hash, triggering a behind-tip drop before consensus validation and delaying tip discovery for mining backends.","evidence":"cve:CVE-2026-109366","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-109366","aliases":["CVE-2026-109366"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":6.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.7,"attackVector":"NETWORK","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"6.4.0","versionType":"semver"},{"status":"unaffected","version":"6.4.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-12T16:05:43.620Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-4f6v-mj46-gxg3","https://www.vulncheck.com/advisories/zebra-before-6.4.0-gossiped-block-drop-via-forged-coinbase-scriptsig-height"],"provider_metadata":{"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-12T16:05:43.620Z"}}},"related_cves":[{"value":"CVE-2026-109366","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:5d3c45c4-cfab-419a-819a-8d8c687c7bcb","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-109366","advisory_id":"5d3c45c4-cfab-419a-819a-8d8c687c7bcb","event_types":["advisory"],"published_at":"2026-10-25T01:27:13.729457+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-12T16:05:43.62+00:00","detail_url":"/events/17087"},"members":[{"id":17087,"cve_ids":["CVE-2026-109366"],"payload":{"kind":"advisory","title":"Zebra before 6.4.0 Gossiped Block Drop via Forged Coinbase scriptSig Height","summary":"Zebra before 6.4.0 contains an improper integrity validation vulnerability in the inbound gossip download path that allows unauthenticated peers to force dropping of new blocks without penalty. Attackers can serve a real block with a coinbase scriptSig rewritten to height 1, which keeps the ZIP-244 block hash, triggering a behind-tip drop before consensus validation and delaying tip discovery for mining backends.","evidence":"cve:CVE-2026-109366","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-109366","aliases":["CVE-2026-109366"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":6.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.7,"attackVector":"NETWORK","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"6.4.0","versionType":"semver"},{"status":"unaffected","version":"6.4.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-12T16:05:43.620Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-4f6v-mj46-gxg3","https://www.vulncheck.com/advisories/zebra-before-6.4.0-gossiped-block-drop-via-forged-coinbase-scriptsig-height"],"provider_metadata":{"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-12T16:05:43.620Z"}}},"related_cves":[{"value":"CVE-2026-109366","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:5d3c45c4-cfab-419a-819a-8d8c687c7bcb","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-109366","advisory_id":"5d3c45c4-cfab-419a-819a-8d8c687c7bcb","event_types":["advisory"],"published_at":"2026-10-25T01:27:13.729457+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-12T16:05:43.62+00:00","detail_url":"/events/17087"}]}},{"id":9019,"cve_ids":["CVE-2026-104432"],"payload":{"kind":"advisory","title":"Zebra before 6.3.0 False Readiness via Discarded One-Hash FindBlocks Response","summary":"Zebra before 6.3.0 contains an improper exceptional condition check in ChainSync::obtain_tips that discards valid one-hash FindBlocks responses, falsely reporting close-to-tip status. Peers returning only the next block hash cause a zero-length sync sample, making the /ready endpoint return 200 OK while the node remains behind the tip.","evidence":"cve:CVE-2026-104432","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-104432","aliases":["CVE-2026-104432"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"6.3.0","versionType":"semver"},{"status":"unaffected","version":"6.3.0","versionType":"semver"}],"packageURL":"pkg:cargo/Zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-06T02:41:48.408Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-h8m8-844p-v3m9","https://www.vulncheck.com/advisories/zebra-before-6.3.0-false-readiness-via-discarded-one-hash-findblocks-response"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104432","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-06T02:41:30.517819Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T02:41:48.408Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:11.214Z"}}},"related_cves":[{"value":"CVE-2026-104432","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:db1175b1-4805-481a-838a-b16c2c498174","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104432","advisory_id":"db1175b1-4805-481a-838a-b16c2c498174","event_types":["advisory"],"published_at":"2026-10-24T23:10:22.801628+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:11.214+00:00","detail_url":"/advisories/advisory%3Adb1175b1-4805-481a-838a-b16c2c498174","group":{"id":"advisory:db1175b1-4805-481a-838a-b16c2c498174","revision":1,"primary_event_id":9002,"change":"published","superseded_by":[],"changed":{"id":9002,"cve_ids":["CVE-2026-104432"],"payload":{"kind":"advisory","title":"Zebra before 6.3.0 False Readiness via Discarded One-Hash FindBlocks Response","summary":"Zebra before 6.3.0 contains an improper exceptional condition check in ChainSync::obtain_tips that discards valid one-hash FindBlocks responses, falsely reporting close-to-tip status. Peers returning only the next block hash cause a zero-length sync sample, making the /ready endpoint return 200 OK while the node remains behind the tip.","evidence":"cve:CVE-2026-104432","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-104432","aliases":["CVE-2026-104432"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"6.3.0","versionType":"semver"},{"status":"unaffected","version":"6.3.0","versionType":"semver"}],"packageURL":"pkg:cargo/Zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-06T02:41:48.408Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-h8m8-844p-v3m9","https://www.vulncheck.com/advisories/zebra-before-6.3.0-false-readiness-via-discarded-one-hash-findblocks-response"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104432","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-06T02:41:30.517819Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T02:41:48.408Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:11.214Z"}}},"related_cves":[{"value":"CVE-2026-104432","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:db1175b1-4805-481a-838a-b16c2c498174","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104432","advisory_id":"db1175b1-4805-481a-838a-b16c2c498174","event_types":["advisory"],"published_at":"2026-10-24T23:10:22.801628+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:11.214+00:00","detail_url":"/events/9002"},"members":[{"id":9002,"cve_ids":["CVE-2026-104432"],"payload":{"kind":"advisory","title":"Zebra before 6.3.0 False Readiness via Discarded One-Hash FindBlocks Response","summary":"Zebra before 6.3.0 contains an improper exceptional condition check in ChainSync::obtain_tips that discards valid one-hash FindBlocks responses, falsely reporting close-to-tip status. Peers returning only the next block hash cause a zero-length sync sample, making the /ready endpoint return 200 OK while the node remains behind the tip.","evidence":"cve:CVE-2026-104432","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-104432","aliases":["CVE-2026-104432"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"6.3.0","versionType":"semver"},{"status":"unaffected","version":"6.3.0","versionType":"semver"}],"packageURL":"pkg:cargo/Zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-06T02:41:48.408Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-h8m8-844p-v3m9","https://www.vulncheck.com/advisories/zebra-before-6.3.0-false-readiness-via-discarded-one-hash-findblocks-response"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104432","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-06T02:41:30.517819Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T02:41:48.408Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:11.214Z"}}},"related_cves":[{"value":"CVE-2026-104432","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:db1175b1-4805-481a-838a-b16c2c498174","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104432","advisory_id":"db1175b1-4805-481a-838a-b16c2c498174","event_types":["advisory"],"published_at":"2026-10-24T23:10:22.801628+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:11.214+00:00","detail_url":"/events/9002"}]}},{"id":9018,"cve_ids":["CVE-2026-104428"],"payload":{"kind":"advisory","title":"Zebra before 11.0.0 Denial of Service via getblock Verbosity 2","summary":"The getblock RPC method in zebra-rpc before 11.0.0, used by the Zcash Foundation's Zebra node, panics on verbosity 2 for a side-chain block because the block's -1 confirmations sentinel is converted to u32 with .expect(), aborting the process. Remote unauthenticated attackers, directly or through lightwalletd, can repeat this call to keep the node in a crash loop.","evidence":"cve:CVE-2026-104428","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-104428","aliases":["CVE-2026-104428"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"11.0.0","versionType":"semver"},{"status":"unaffected","version":"11.0.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebra-rpc","defaultStatus":"unaffected"}],"modified":"2026-10-06T02:40:55.553Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-x6v8-c2xp-928m","https://www.vulncheck.com/advisories/zebra-before-11.0.0-denial-of-service-via-getblock-verbosity-2"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104428","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-06T02:40:45.728254Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T02:40:55.553Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:08.558Z"}}},"related_cves":[{"value":"CVE-2026-104428","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:b2e28d8e-8f6c-47ec-82f2-5092f774ba33","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104428","advisory_id":"b2e28d8e-8f6c-47ec-82f2-5092f774ba33","event_types":["advisory"],"published_at":"2026-10-24T23:10:22.207118+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:08.558+00:00","detail_url":"/advisories/advisory%3Ab2e28d8e-8f6c-47ec-82f2-5092f774ba33","group":{"id":"advisory:b2e28d8e-8f6c-47ec-82f2-5092f774ba33","revision":1,"primary_event_id":9001,"change":"published","superseded_by":[],"changed":{"id":9001,"cve_ids":["CVE-2026-104428"],"payload":{"kind":"advisory","title":"Zebra before 11.0.0 Denial of Service via getblock Verbosity 2","summary":"The getblock RPC method in zebra-rpc before 11.0.0, used by the Zcash Foundation's Zebra node, panics on verbosity 2 for a side-chain block because the block's -1 confirmations sentinel is converted to u32 with .expect(), aborting the process. Remote unauthenticated attackers, directly or through lightwalletd, can repeat this call to keep the node in a crash loop.","evidence":"cve:CVE-2026-104428","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-104428","aliases":["CVE-2026-104428"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"11.0.0","versionType":"semver"},{"status":"unaffected","version":"11.0.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebra-rpc","defaultStatus":"unaffected"}],"modified":"2026-10-06T02:40:55.553Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-x6v8-c2xp-928m","https://www.vulncheck.com/advisories/zebra-before-11.0.0-denial-of-service-via-getblock-verbosity-2"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104428","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-06T02:40:45.728254Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T02:40:55.553Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:08.558Z"}}},"related_cves":[{"value":"CVE-2026-104428","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:b2e28d8e-8f6c-47ec-82f2-5092f774ba33","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104428","advisory_id":"b2e28d8e-8f6c-47ec-82f2-5092f774ba33","event_types":["advisory"],"published_at":"2026-10-24T23:10:22.207118+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:08.558+00:00","detail_url":"/events/9001"},"members":[{"id":9001,"cve_ids":["CVE-2026-104428"],"payload":{"kind":"advisory","title":"Zebra before 11.0.0 Denial of Service via getblock Verbosity 2","summary":"The getblock RPC method in zebra-rpc before 11.0.0, used by the Zcash Foundation's Zebra node, panics on verbosity 2 for a side-chain block because the block's -1 confirmations sentinel is converted to u32 with .expect(), aborting the process. Remote unauthenticated attackers, directly or through lightwalletd, can repeat this call to keep the node in a crash loop.","evidence":"cve:CVE-2026-104428","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-104428","aliases":["CVE-2026-104428"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"11.0.0","versionType":"semver"},{"status":"unaffected","version":"11.0.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebra-rpc","defaultStatus":"unaffected"}],"modified":"2026-10-06T02:40:55.553Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-x6v8-c2xp-928m","https://www.vulncheck.com/advisories/zebra-before-11.0.0-denial-of-service-via-getblock-verbosity-2"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104428","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-06T02:40:45.728254Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T02:40:55.553Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:08.558Z"}}},"related_cves":[{"value":"CVE-2026-104428","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:b2e28d8e-8f6c-47ec-82f2-5092f774ba33","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104428","advisory_id":"b2e28d8e-8f6c-47ec-82f2-5092f774ba33","event_types":["advisory"],"published_at":"2026-10-24T23:10:22.207118+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:08.558+00:00","detail_url":"/events/9001"}]}},{"id":9017,"cve_ids":["CVE-2026-104424"],"payload":{"kind":"advisory","title":"Zebra before 6.1.0 Incorrect Block Size Calculation in getblocktemplate","summary":"Zebra before 6.1.0 contains an incorrect calculation vulnerability in its ZIP-317 block template selector that omits header and transaction-count size from the block budget. Attackers can place valid selectable transactions in a victim miner's mempool to shape templates into oversized blocks, causing rejection and wasted proof-of-work.","evidence":"cve:CVE-2026-104424","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-104424","aliases":["CVE-2026-104424"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":6.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.7,"attackVector":"NETWORK","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"6.1.0","versionType":"semver"},{"status":"unaffected","version":"6.1.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-06T02:38:24.183Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-95m2-vx53-v2jw","https://www.vulncheck.com/advisories/zebra-before-6.1.0-incorrect-block-size-calculation-in-getblocktemplate"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104424","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-06T02:38:13.781191Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T02:38:24.183Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:05.827Z"}}},"related_cves":[{"value":"CVE-2026-104424","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:5422cf69-bd64-4ba6-8de0-8eb43acfd56a","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104424","advisory_id":"5422cf69-bd64-4ba6-8de0-8eb43acfd56a","event_types":["advisory"],"published_at":"2026-10-24T23:10:21.616888+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:05.827+00:00","detail_url":"/advisories/advisory%3A5422cf69-bd64-4ba6-8de0-8eb43acfd56a","group":{"id":"advisory:5422cf69-bd64-4ba6-8de0-8eb43acfd56a","revision":1,"primary_event_id":9000,"change":"published","superseded_by":[],"changed":{"id":9000,"cve_ids":["CVE-2026-104424"],"payload":{"kind":"advisory","title":"Zebra before 6.1.0 Incorrect Block Size Calculation in getblocktemplate","summary":"Zebra before 6.1.0 contains an incorrect calculation vulnerability in its ZIP-317 block template selector that omits header and transaction-count size from the block budget. Attackers can place valid selectable transactions in a victim miner's mempool to shape templates into oversized blocks, causing rejection and wasted proof-of-work.","evidence":"cve:CVE-2026-104424","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-104424","aliases":["CVE-2026-104424"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":6.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.7,"attackVector":"NETWORK","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"6.1.0","versionType":"semver"},{"status":"unaffected","version":"6.1.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-06T02:38:24.183Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-95m2-vx53-v2jw","https://www.vulncheck.com/advisories/zebra-before-6.1.0-incorrect-block-size-calculation-in-getblocktemplate"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104424","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-06T02:38:13.781191Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T02:38:24.183Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:05.827Z"}}},"related_cves":[{"value":"CVE-2026-104424","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:5422cf69-bd64-4ba6-8de0-8eb43acfd56a","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104424","advisory_id":"5422cf69-bd64-4ba6-8de0-8eb43acfd56a","event_types":["advisory"],"published_at":"2026-10-24T23:10:21.616888+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:05.827+00:00","detail_url":"/events/9000"},"members":[{"id":9000,"cve_ids":["CVE-2026-104424"],"payload":{"kind":"advisory","title":"Zebra before 6.1.0 Incorrect Block Size Calculation in getblocktemplate","summary":"Zebra before 6.1.0 contains an incorrect calculation vulnerability in its ZIP-317 block template selector that omits header and transaction-count size from the block budget. Attackers can place valid selectable transactions in a victim miner's mempool to shape templates into oversized blocks, causing rejection and wasted proof-of-work.","evidence":"cve:CVE-2026-104424","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-104424","aliases":["CVE-2026-104424"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":6.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.7,"attackVector":"NETWORK","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"6.1.0","versionType":"semver"},{"status":"unaffected","version":"6.1.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-06T02:38:24.183Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-95m2-vx53-v2jw","https://www.vulncheck.com/advisories/zebra-before-6.1.0-incorrect-block-size-calculation-in-getblocktemplate"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104424","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-06T02:38:13.781191Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T02:38:24.183Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:05.827Z"}}},"related_cves":[{"value":"CVE-2026-104424","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:5422cf69-bd64-4ba6-8de0-8eb43acfd56a","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104424","advisory_id":"5422cf69-bd64-4ba6-8de0-8eb43acfd56a","event_types":["advisory"],"published_at":"2026-10-24T23:10:21.616888+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:05.827+00:00","detail_url":"/events/9000"}]}},{"id":9015,"cve_ids":["CVE-2026-104420"],"payload":{"kind":"advisory","title":"Zebra before 6.3.0 Peer Misbehavior Ban Bypass via Gossiped Blocks","summary":"Zebra before 6.3.0 contains a protection mechanism failure that allows unauthenticated peers to evade misbehavior scoring by supplying invalid gossiped blocks. The inbound cleanup step wrongly downcasts RouterError to VerifyBlockError and discards the score, so attackers can repeatedly force block download and Equihash verification without being banned.","evidence":"cve:CVE-2026-104420","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-104420","aliases":["CVE-2026-104420"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"6.3.0","versionType":"semver"},{"status":"unaffected","version":"6.3.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-06T02:37:15.210Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-8hh2-hrf2-cqf4","https://www.vulncheck.com/advisories/zebra-before-6.3.0-peer-misbehavior-ban-bypass-via-gossiped-blocks"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104420","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-06T02:37:04.929175Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T02:37:15.210Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:01.836Z"}}},"related_cves":[{"value":"CVE-2026-104420","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:aac70678-9735-4f44-b06d-beef7a005bfb","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104420","advisory_id":"aac70678-9735-4f44-b06d-beef7a005bfb","event_types":["advisory"],"published_at":"2026-10-24T23:10:20.436414+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:01.836+00:00","detail_url":"/advisories/advisory%3Aaac70678-9735-4f44-b06d-beef7a005bfb","group":{"id":"advisory:aac70678-9735-4f44-b06d-beef7a005bfb","revision":1,"primary_event_id":8998,"change":"published","superseded_by":[],"changed":{"id":8998,"cve_ids":["CVE-2026-104420"],"payload":{"kind":"advisory","title":"Zebra before 6.3.0 Peer Misbehavior Ban Bypass via Gossiped Blocks","summary":"Zebra before 6.3.0 contains a protection mechanism failure that allows unauthenticated peers to evade misbehavior scoring by supplying invalid gossiped blocks. The inbound cleanup step wrongly downcasts RouterError to VerifyBlockError and discards the score, so attackers can repeatedly force block download and Equihash verification without being banned.","evidence":"cve:CVE-2026-104420","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-104420","aliases":["CVE-2026-104420"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"6.3.0","versionType":"semver"},{"status":"unaffected","version":"6.3.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-06T02:37:15.210Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-8hh2-hrf2-cqf4","https://www.vulncheck.com/advisories/zebra-before-6.3.0-peer-misbehavior-ban-bypass-via-gossiped-blocks"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104420","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-06T02:37:04.929175Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T02:37:15.210Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:01.836Z"}}},"related_cves":[{"value":"CVE-2026-104420","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:aac70678-9735-4f44-b06d-beef7a005bfb","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104420","advisory_id":"aac70678-9735-4f44-b06d-beef7a005bfb","event_types":["advisory"],"published_at":"2026-10-24T23:10:20.436414+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:01.836+00:00","detail_url":"/events/8998"},"members":[{"id":8998,"cve_ids":["CVE-2026-104420"],"payload":{"kind":"advisory","title":"Zebra before 6.3.0 Peer Misbehavior Ban Bypass via Gossiped Blocks","summary":"Zebra before 6.3.0 contains a protection mechanism failure that allows unauthenticated peers to evade misbehavior scoring by supplying invalid gossiped blocks. The inbound cleanup step wrongly downcasts RouterError to VerifyBlockError and discards the score, so attackers can repeatedly force block download and Equihash verification without being banned.","evidence":"cve:CVE-2026-104420","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-104420","aliases":["CVE-2026-104420"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"6.3.0","versionType":"semver"},{"status":"unaffected","version":"6.3.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-06T02:37:15.210Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-8hh2-hrf2-cqf4","https://www.vulncheck.com/advisories/zebra-before-6.3.0-peer-misbehavior-ban-bypass-via-gossiped-blocks"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104420","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-06T02:37:04.929175Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T02:37:15.210Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:01.836Z"}}},"related_cves":[{"value":"CVE-2026-104420","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:aac70678-9735-4f44-b06d-beef7a005bfb","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104420","advisory_id":"aac70678-9735-4f44-b06d-beef7a005bfb","event_types":["advisory"],"published_at":"2026-10-24T23:10:20.436414+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:01.836+00:00","detail_url":"/events/8998"}]}},{"id":8702,"cve_ids":["CVE-2026-104419"],"payload":{"kind":"advisory","title":"Zebra before 6.3.0 Honest Peer Banning via Far-Ahead FindBlocks Hashes","summary":"Zebra (zebrad) 4.5.0 before 6.3.0 discards which peer supplied the block hashes in FindBlocks responses, then assigns 100 misbehavior points, the ban threshold, to whichever peer serves a requested block more than 50,000 heights above the tip. A remote peer can return real far-ahead hashes to a syncing node so that honest peers get banned, eroding its peer set and raising eclipse risk.","evidence":"cve:CVE-2026-104419","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-104419","aliases":["CVE-2026-104419"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":6.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.8,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"6.3.0","versionType":"semver"},{"status":"unaffected","version":"6.3.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-05T15:05:08.363Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-qhr3-cvch-5fh2","https://www.vulncheck.com/advisories/zebra-before-6.3.0-honest-peer-banning-via-far-ahead-findblocks-hashes"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104419","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-05T15:04:56.762886Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-05T15:05:08.363Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:01.103Z"}}},"related_cves":[{"value":"CVE-2026-104419","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:438fe2aa-9247-441c-b19c-4dec7dfe8a52","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104419","advisory_id":"438fe2aa-9247-441c-b19c-4dec7dfe8a52","event_types":["advisory"],"published_at":"2026-10-24T23:05:09.166605+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:01.103+00:00","detail_url":"/advisories/advisory%3A438fe2aa-9247-441c-b19c-4dec7dfe8a52","group":{"id":"advisory:438fe2aa-9247-441c-b19c-4dec7dfe8a52","revision":1,"primary_event_id":8690,"change":"published","superseded_by":[],"changed":{"id":8690,"cve_ids":["CVE-2026-104419"],"payload":{"kind":"advisory","title":"Zebra before 6.3.0 Honest Peer Banning via Far-Ahead FindBlocks Hashes","summary":"Zebra (zebrad) 4.5.0 before 6.3.0 discards which peer supplied the block hashes in FindBlocks responses, then assigns 100 misbehavior points, the ban threshold, to whichever peer serves a requested block more than 50,000 heights above the tip. A remote peer can return real far-ahead hashes to a syncing node so that honest peers get banned, eroding its peer set and raising eclipse risk.","evidence":"cve:CVE-2026-104419","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-104419","aliases":["CVE-2026-104419"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":6.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.8,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"6.3.0","versionType":"semver"},{"status":"unaffected","version":"6.3.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-05T15:05:08.363Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-qhr3-cvch-5fh2","https://www.vulncheck.com/advisories/zebra-before-6.3.0-honest-peer-banning-via-far-ahead-findblocks-hashes"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104419","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-05T15:04:56.762886Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-05T15:05:08.363Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:01.103Z"}}},"related_cves":[{"value":"CVE-2026-104419","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:438fe2aa-9247-441c-b19c-4dec7dfe8a52","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104419","advisory_id":"438fe2aa-9247-441c-b19c-4dec7dfe8a52","event_types":["advisory"],"published_at":"2026-10-24T23:05:09.166605+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:01.103+00:00","detail_url":"/events/8690"},"members":[{"id":8690,"cve_ids":["CVE-2026-104419"],"payload":{"kind":"advisory","title":"Zebra before 6.3.0 Honest Peer Banning via Far-Ahead FindBlocks Hashes","summary":"Zebra (zebrad) 4.5.0 before 6.3.0 discards which peer supplied the block hashes in FindBlocks responses, then assigns 100 misbehavior points, the ban threshold, to whichever peer serves a requested block more than 50,000 heights above the tip. A remote peer can return real far-ahead hashes to a syncing node so that honest peers get banned, eroding its peer set and raising eclipse risk.","evidence":"cve:CVE-2026-104419","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-104419","aliases":["CVE-2026-104419"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":6.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.8,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"6.3.0","versionType":"semver"},{"status":"unaffected","version":"6.3.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-05T15:05:08.363Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-qhr3-cvch-5fh2","https://www.vulncheck.com/advisories/zebra-before-6.3.0-honest-peer-banning-via-far-ahead-findblocks-hashes"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104419","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-05T15:04:56.762886Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-05T15:05:08.363Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:01.103Z"}}},"related_cves":[{"value":"CVE-2026-104419","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:438fe2aa-9247-441c-b19c-4dec7dfe8a52","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104419","advisory_id":"438fe2aa-9247-441c-b19c-4dec7dfe8a52","event_types":["advisory"],"published_at":"2026-10-24T23:05:09.166605+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:01.103+00:00","detail_url":"/events/8690"}]}},{"id":8680,"cve_ids":["CVE-2026-104427"],"payload":{"kind":"advisory","title":"Zebra before 6.1.0 Chain Stall via Stale parent_error_map Entry","summary":"Zebra before 6.1.0 contains an incomplete cleanup vulnerability in the state write task that allows remote unauthenticated peers to stall node synchronization by poisoning parent_error_map. Attackers can deliver a coinbase-malleated block sharing a canonical block's hash before it propagates, causing the next canonical block to be rejected and stalling the node for roughly 2,000 blocks.","evidence":"cve:CVE-2026-104427","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-104427","aliases":["CVE-2026-104427"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"6.1.0","versionType":"semver"},{"status":"unaffected","version":"6.1.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-05T14:53:45.275Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-8gxx-hc65-vv82","https://www.vulncheck.com/advisories/zebra-before-6.1.0-chain-stall-via-stale-parent-error-map-entry"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104427","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-05T14:53:37.615214Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-05T14:53:45.275Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:07.777Z"}}},"related_cves":[{"value":"CVE-2026-104427","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:3242834c-e2bb-462a-8c68-d3c7a32eb0b8","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104427","advisory_id":"3242834c-e2bb-462a-8c68-d3c7a32eb0b8","event_types":["advisory"],"published_at":"2026-10-24T23:04:55.97353+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:07.777+00:00","detail_url":"/advisories/advisory%3A3242834c-e2bb-462a-8c68-d3c7a32eb0b8","group":{"id":"advisory:3242834c-e2bb-462a-8c68-d3c7a32eb0b8","revision":1,"primary_event_id":8669,"change":"published","superseded_by":[],"changed":{"id":8669,"cve_ids":["CVE-2026-104427"],"payload":{"kind":"advisory","title":"Zebra before 6.1.0 Chain Stall via Stale parent_error_map Entry","summary":"Zebra before 6.1.0 contains an incomplete cleanup vulnerability in the state write task that allows remote unauthenticated peers to stall node synchronization by poisoning parent_error_map. Attackers can deliver a coinbase-malleated block sharing a canonical block's hash before it propagates, causing the next canonical block to be rejected and stalling the node for roughly 2,000 blocks.","evidence":"cve:CVE-2026-104427","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-104427","aliases":["CVE-2026-104427"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"6.1.0","versionType":"semver"},{"status":"unaffected","version":"6.1.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-05T14:53:45.275Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-8gxx-hc65-vv82","https://www.vulncheck.com/advisories/zebra-before-6.1.0-chain-stall-via-stale-parent-error-map-entry"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104427","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-05T14:53:37.615214Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-05T14:53:45.275Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:07.777Z"}}},"related_cves":[{"value":"CVE-2026-104427","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:3242834c-e2bb-462a-8c68-d3c7a32eb0b8","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104427","advisory_id":"3242834c-e2bb-462a-8c68-d3c7a32eb0b8","event_types":["advisory"],"published_at":"2026-10-24T23:04:55.97353+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:07.777+00:00","detail_url":"/events/8669"},"members":[{"id":8669,"cve_ids":["CVE-2026-104427"],"payload":{"kind":"advisory","title":"Zebra before 6.1.0 Chain Stall via Stale parent_error_map Entry","summary":"Zebra before 6.1.0 contains an incomplete cleanup vulnerability in the state write task that allows remote unauthenticated peers to stall node synchronization by poisoning parent_error_map. Attackers can deliver a coinbase-malleated block sharing a canonical block's hash before it propagates, causing the next canonical block to be rejected and stalling the node for roughly 2,000 blocks.","evidence":"cve:CVE-2026-104427","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-104427","aliases":["CVE-2026-104427"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"6.1.0","versionType":"semver"},{"status":"unaffected","version":"6.1.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-05T14:53:45.275Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-8gxx-hc65-vv82","https://www.vulncheck.com/advisories/zebra-before-6.1.0-chain-stall-via-stale-parent-error-map-entry"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104427","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-05T14:53:37.615214Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-05T14:53:45.275Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:07.777Z"}}},"related_cves":[{"value":"CVE-2026-104427","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:3242834c-e2bb-462a-8c68-d3c7a32eb0b8","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104427","advisory_id":"3242834c-e2bb-462a-8c68-d3c7a32eb0b8","event_types":["advisory"],"published_at":"2026-10-24T23:04:55.97353+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:07.777+00:00","detail_url":"/events/8669"}]}},{"id":8069,"cve_ids":["CVE-2026-104422"],"payload":{"kind":"advisory","title":"Zebra before 6.3.0 Block Sync Denial of Service via Coinbase scriptSig Rewrite","summary":"The block sync download path in Zebra (zebrad) before 6.3.0 reads a block's height from its unvalidated coinbase scriptSig and drops blocks that appear too far behind the tip before consensus validation, without penalizing the supplying peer. Because V5 transaction IDs exclude the scriptSig, a malicious peer can repeatedly serve a canonical block whose coinbase claims height 1 while keeping the requested hash, delaying the node's discovery of the newest block.","evidence":"cve:CVE-2026-104422","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-104422","aliases":["CVE-2026-104422"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"6.3.0","versionType":"semver"},{"status":"unaffected","version":"6.3.0","versionType":"semver"}],"packageURL":"pkg:cargo/Zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-02T17:35:03.530Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-g95h-hw6g-pvgv","https://www.vulncheck.com/advisories/zebra-before-6.3.0-block-sync-denial-of-service-via-coinbase-scriptsig-rewrite"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104422","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-02T17:34:45.949504Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-02T17:35:03.530Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:03.646Z"}}},"related_cves":[{"value":"CVE-2026-104422","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:4ef141ae-c2bd-48ca-97f7-dd03aa06a653","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104422","advisory_id":"4ef141ae-c2bd-48ca-97f7-dd03aa06a653","event_types":["advisory"],"published_at":"2026-10-24T22:54:56.409051+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:03.646+00:00","detail_url":"/advisories/advisory%3A4ef141ae-c2bd-48ca-97f7-dd03aa06a653","group":{"id":"advisory:4ef141ae-c2bd-48ca-97f7-dd03aa06a653","revision":1,"primary_event_id":8065,"change":"published","superseded_by":[],"changed":{"id":8065,"cve_ids":["CVE-2026-104422"],"payload":{"kind":"advisory","title":"Zebra before 6.3.0 Block Sync Denial of Service via Coinbase scriptSig Rewrite","summary":"The block sync download path in Zebra (zebrad) before 6.3.0 reads a block's height from its unvalidated coinbase scriptSig and drops blocks that appear too far behind the tip before consensus validation, without penalizing the supplying peer. Because V5 transaction IDs exclude the scriptSig, a malicious peer can repeatedly serve a canonical block whose coinbase claims height 1 while keeping the requested hash, delaying the node's discovery of the newest block.","evidence":"cve:CVE-2026-104422","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-104422","aliases":["CVE-2026-104422"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"6.3.0","versionType":"semver"},{"status":"unaffected","version":"6.3.0","versionType":"semver"}],"packageURL":"pkg:cargo/Zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-02T17:35:03.530Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-g95h-hw6g-pvgv","https://www.vulncheck.com/advisories/zebra-before-6.3.0-block-sync-denial-of-service-via-coinbase-scriptsig-rewrite"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104422","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-02T17:34:45.949504Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-02T17:35:03.530Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:03.646Z"}}},"related_cves":[{"value":"CVE-2026-104422","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:4ef141ae-c2bd-48ca-97f7-dd03aa06a653","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104422","advisory_id":"4ef141ae-c2bd-48ca-97f7-dd03aa06a653","event_types":["advisory"],"published_at":"2026-10-24T22:54:56.409051+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:03.646+00:00","detail_url":"/events/8065"},"members":[{"id":8065,"cve_ids":["CVE-2026-104422"],"payload":{"kind":"advisory","title":"Zebra before 6.3.0 Block Sync Denial of Service via Coinbase scriptSig Rewrite","summary":"The block sync download path in Zebra (zebrad) before 6.3.0 reads a block's height from its unvalidated coinbase scriptSig and drops blocks that appear too far behind the tip before consensus validation, without penalizing the supplying peer. Because V5 transaction IDs exclude the scriptSig, a malicious peer can repeatedly serve a canonical block whose coinbase claims height 1 while keeping the requested hash, delaying the node's discovery of the newest block.","evidence":"cve:CVE-2026-104422","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-104422","aliases":["CVE-2026-104422"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"6.3.0","versionType":"semver"},{"status":"unaffected","version":"6.3.0","versionType":"semver"}],"packageURL":"pkg:cargo/Zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-02T17:35:03.530Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-g95h-hw6g-pvgv","https://www.vulncheck.com/advisories/zebra-before-6.3.0-block-sync-denial-of-service-via-coinbase-scriptsig-rewrite"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104422","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-02T17:34:45.949504Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-02T17:35:03.530Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:03.646Z"}}},"related_cves":[{"value":"CVE-2026-104422","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:4ef141ae-c2bd-48ca-97f7-dd03aa06a653","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104422","advisory_id":"4ef141ae-c2bd-48ca-97f7-dd03aa06a653","event_types":["advisory"],"published_at":"2026-10-24T22:54:56.409051+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:03.646+00:00","detail_url":"/events/8065"}]}},{"id":8008,"cve_ids":["CVE-2026-104423"],"payload":{"kind":"advisory","title":"Zebra before 6.2.1 Denial of Service via Uncapped V6 Shielded Proof Verification","summary":"Zebra (zebrad) before 6.2.1 contains an asymmetric resource consumption vulnerability that allows unauthenticated peers to stall block verification by pushing V6 mempool transactions with invalid Halo2 proofs. Attackers can flood the shared unprioritized Halo2 verification queue with zero-fee transactions carrying zero-filled Orchard and Ironwood proofs, causing nodes to fall behind the chain tip.","evidence":"cve:CVE-2026-104423","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-104423","aliases":["CVE-2026-104423"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"6.2.1","versionType":"semver"},{"status":"unaffected","version":"6.2.1","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-02T15:55:54.144Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-2p4c-3q4q-p463","https://www.vulncheck.com/advisories/zebra-before-6.2.1-denial-of-service-via-uncapped-v6-shielded-proof-verification"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104423","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-02T15:55:46.130893Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-02T15:55:54.144Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:05.140Z"}}},"related_cves":[{"value":"CVE-2026-104423","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:b705f1a7-05ea-4ecc-8b9d-6da2f8e836c8","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104423","advisory_id":"b705f1a7-05ea-4ecc-8b9d-6da2f8e836c8","event_types":["advisory"],"published_at":"2026-10-24T22:53:31.132218+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:05.14+00:00","detail_url":"/advisories/advisory%3Ab705f1a7-05ea-4ecc-8b9d-6da2f8e836c8","group":{"id":"advisory:b705f1a7-05ea-4ecc-8b9d-6da2f8e836c8","revision":1,"primary_event_id":8004,"change":"published","superseded_by":[],"changed":{"id":8004,"cve_ids":["CVE-2026-104423"],"payload":{"kind":"advisory","title":"Zebra before 6.2.1 Denial of Service via Uncapped V6 Shielded Proof Verification","summary":"Zebra (zebrad) before 6.2.1 contains an asymmetric resource consumption vulnerability that allows unauthenticated peers to stall block verification by pushing V6 mempool transactions with invalid Halo2 proofs. Attackers can flood the shared unprioritized Halo2 verification queue with zero-fee transactions carrying zero-filled Orchard and Ironwood proofs, causing nodes to fall behind the chain tip.","evidence":"cve:CVE-2026-104423","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-104423","aliases":["CVE-2026-104423"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"6.2.1","versionType":"semver"},{"status":"unaffected","version":"6.2.1","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-02T15:55:54.144Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-2p4c-3q4q-p463","https://www.vulncheck.com/advisories/zebra-before-6.2.1-denial-of-service-via-uncapped-v6-shielded-proof-verification"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104423","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-02T15:55:46.130893Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-02T15:55:54.144Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:05.140Z"}}},"related_cves":[{"value":"CVE-2026-104423","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:b705f1a7-05ea-4ecc-8b9d-6da2f8e836c8","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104423","advisory_id":"b705f1a7-05ea-4ecc-8b9d-6da2f8e836c8","event_types":["advisory"],"published_at":"2026-10-24T22:53:31.132218+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:05.14+00:00","detail_url":"/events/8004"},"members":[{"id":8004,"cve_ids":["CVE-2026-104423"],"payload":{"kind":"advisory","title":"Zebra before 6.2.1 Denial of Service via Uncapped V6 Shielded Proof Verification","summary":"Zebra (zebrad) before 6.2.1 contains an asymmetric resource consumption vulnerability that allows unauthenticated peers to stall block verification by pushing V6 mempool transactions with invalid Halo2 proofs. Attackers can flood the shared unprioritized Halo2 verification queue with zero-fee transactions carrying zero-filled Orchard and Ironwood proofs, causing nodes to fall behind the chain tip.","evidence":"cve:CVE-2026-104423","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-104423","aliases":["CVE-2026-104423"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"6.2.1","versionType":"semver"},{"status":"unaffected","version":"6.2.1","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-02T15:55:54.144Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-2p4c-3q4q-p463","https://www.vulncheck.com/advisories/zebra-before-6.2.1-denial-of-service-via-uncapped-v6-shielded-proof-verification"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104423","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-02T15:55:46.130893Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-02T15:55:54.144Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:05.140Z"}}},"related_cves":[{"value":"CVE-2026-104423","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:b705f1a7-05ea-4ecc-8b9d-6da2f8e836c8","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104423","advisory_id":"b705f1a7-05ea-4ecc-8b9d-6da2f8e836c8","event_types":["advisory"],"published_at":"2026-10-24T22:53:31.132218+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:05.14+00:00","detail_url":"/events/8004"}]}},{"id":8002,"cve_ids":["CVE-2026-104434"],"payload":{"kind":"advisory","title":"Zebra before 8.0.0 Denial of Service via z_listunifiedreceivers RPC","summary":"ZcashFoundation Zebra zebra-rpc before 8.0.0 and zebrad before 4.5.0 contain a reachable assertion in the z_listunifiedreceivers RPC handler, which calls expect() on Sapling receiver parsing that fails for Unified Addresses carrying invalid Jubjub points. Authenticated RPC clients can submit such an address to abort the zebrad process, repeatably keeping the node offline.","evidence":"cve:CVE-2026-104434","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"zebra","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-104434","aliases":["CVE-2026-104434"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":7.1,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"8.0.0","versionType":"semver"},{"status":"unaffected","version":"8.0.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebra-rpc","defaultStatus":"unaffected"},{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"4.5.0","versionType":"semver"},{"status":"unaffected","version":"4.5.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-02T15:30:07.619Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-c8w6-x74f-vmg3","https://www.vulncheck.com/advisories/zebra-before-8.0.0-denial-of-service-via-z-listunifiedreceivers-rpc"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104434","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-02T15:28:55.986876Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-02T15:30:07.619Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:11.845Z"}}},"related_cves":[{"value":"CVE-2026-104434","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:54b04b01-a90e-43b7-8ac1-a48546a2926f","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-104434","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}],"products":[{"name":{"value":"zebra-rpc","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.0.0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"zebrad","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.5.0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-c8w6-x74f-vmg3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":2,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104434","advisory_id":"54b04b01-a90e-43b7-8ac1-a48546a2926f","event_types":["advisory"],"published_at":"2026-10-24T22:53:27.629745+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:11.845+00:00","detail_url":"/advisories/advisory%3A54b04b01-a90e-43b7-8ac1-a48546a2926f","group":{"id":"advisory:54b04b01-a90e-43b7-8ac1-a48546a2926f","revision":1,"primary_event_id":72830,"change":"published","superseded_by":[],"changed":{"id":7998,"cve_ids":["CVE-2026-104434"],"payload":{"kind":"advisory","title":"Zebra before 8.0.0 Denial of Service via z_listunifiedreceivers RPC","summary":"ZcashFoundation Zebra zebra-rpc before 8.0.0 and zebrad before 4.5.0 contain a reachable assertion in the z_listunifiedreceivers RPC handler, which calls expect() on Sapling receiver parsing that fails for Unified Addresses carrying invalid Jubjub points. Authenticated RPC clients can submit such an address to abort the zebrad process, repeatably keeping the node offline.","evidence":"cve:CVE-2026-104434","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"zebra","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-104434","aliases":["CVE-2026-104434"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":7.1,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"8.0.0","versionType":"semver"},{"status":"unaffected","version":"8.0.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebra-rpc","defaultStatus":"unaffected"},{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"4.5.0","versionType":"semver"},{"status":"unaffected","version":"4.5.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-02T15:30:07.619Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-c8w6-x74f-vmg3","https://www.vulncheck.com/advisories/zebra-before-8.0.0-denial-of-service-via-z-listunifiedreceivers-rpc"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104434","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-02T15:28:55.986876Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-02T15:30:07.619Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:11.845Z"}}},"related_cves":[{"value":"CVE-2026-104434","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:54b04b01-a90e-43b7-8ac1-a48546a2926f","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104434","advisory_id":"54b04b01-a90e-43b7-8ac1-a48546a2926f","event_types":["advisory"],"published_at":"2026-10-24T22:53:27.629745+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:11.845+00:00","detail_url":"/events/7998"},"members":[{"id":72830,"cve_ids":["CVE-2026-104434"],"payload":{"kind":"advisory","title":"Zebra before 8.0.0 Denial of Service via z_listunifiedreceivers RPC","summary":"ZcashFoundation Zebra zebra-rpc before 8.0.0 and zebrad before 4.5.0 contain a reachable assertion in the z_listunifiedreceivers RPC handler, which calls expect() on Sapling receiver parsing that fails for Unified Addresses carrying invalid Jubjub points. Authenticated RPC clients can submit such an address to abort the zebrad process, repeatably keeping the node offline.","evidence":"cve:CVE-2026-104434","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"zebra","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-104434","aliases":["CVE-2026-104434"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":7.1,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"8.0.0","versionType":"semver"},{"status":"unaffected","version":"8.0.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebra-rpc","defaultStatus":"unaffected"},{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"4.5.0","versionType":"semver"},{"status":"unaffected","version":"4.5.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-02T15:30:07.619Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-c8w6-x74f-vmg3","https://www.vulncheck.com/advisories/zebra-before-8.0.0-denial-of-service-via-z-listunifiedreceivers-rpc"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104434","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-02T15:28:55.986876Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-02T15:30:07.619Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:11.845Z"}}},"related_cves":[{"value":"CVE-2026-104434","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:54b04b01-a90e-43b7-8ac1-a48546a2926f","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-104434","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}],"products":[{"name":{"value":"zebra-rpc","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.0.0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"zebrad","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.5.0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-c8w6-x74f-vmg3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":2,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104434","advisory_id":"54b04b01-a90e-43b7-8ac1-a48546a2926f","event_types":["advisory"],"published_at":"2026-10-26T00:18:28.59708+00:00","technologies":["core-cve","zebra"],"context_update":true,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:11.845+00:00","detail_url":"/events/72830"}]}},{"id":8001,"cve_ids":["CVE-2026-104425"],"payload":{"kind":"advisory","title":"Zebra before 6.1.0 Batch-Verification Poisoning DoS via Unattributed Pushed Transactions","summary":"ZcashFoundation Zebra before 6.1.0 contains a resource exhaustion vulnerability that allows unauthenticated peers to degrade block processing by pushing transactions with invalid Orchard proofs without being misbehavior-scored. Attackers can repeatedly push invalid proofs into the shared halo2 batch verifier, forcing honest block proofs onto the slow individual-verification path and slowing block processing roughly sevenfold.","evidence":"cve:CVE-2026-104425","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-104425","aliases":["CVE-2026-104425"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"6.1.0","versionType":"semver"},{"status":"unaffected","version":"6.1.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-02T15:35:22.404Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-g7c4-2w6c-cr3r","https://www.vulncheck.com/advisories/zebra-before-6.1.0-batch-verification-poisoning-dos-via-unattributed-pushed-transactions"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104425","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-02T15:34:04.808428Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-02T15:35:22.404Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:06.504Z"}}},"related_cves":[{"value":"CVE-2026-104425","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:a93bb2bc-575d-42cf-b0f3-4017cdad0f98","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104425","advisory_id":"a93bb2bc-575d-42cf-b0f3-4017cdad0f98","event_types":["advisory"],"published_at":"2026-10-24T22:53:27.059222+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:06.504+00:00","detail_url":"/advisories/advisory%3Aa93bb2bc-575d-42cf-b0f3-4017cdad0f98","group":{"id":"advisory:a93bb2bc-575d-42cf-b0f3-4017cdad0f98","revision":1,"primary_event_id":7997,"change":"published","superseded_by":[],"changed":{"id":7997,"cve_ids":["CVE-2026-104425"],"payload":{"kind":"advisory","title":"Zebra before 6.1.0 Batch-Verification Poisoning DoS via Unattributed Pushed Transactions","summary":"ZcashFoundation Zebra before 6.1.0 contains a resource exhaustion vulnerability that allows unauthenticated peers to degrade block processing by pushing transactions with invalid Orchard proofs without being misbehavior-scored. Attackers can repeatedly push invalid proofs into the shared halo2 batch verifier, forcing honest block proofs onto the slow individual-verification path and slowing block processing roughly sevenfold.","evidence":"cve:CVE-2026-104425","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-104425","aliases":["CVE-2026-104425"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"6.1.0","versionType":"semver"},{"status":"unaffected","version":"6.1.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-02T15:35:22.404Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-g7c4-2w6c-cr3r","https://www.vulncheck.com/advisories/zebra-before-6.1.0-batch-verification-poisoning-dos-via-unattributed-pushed-transactions"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104425","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-02T15:34:04.808428Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-02T15:35:22.404Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:06.504Z"}}},"related_cves":[{"value":"CVE-2026-104425","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:a93bb2bc-575d-42cf-b0f3-4017cdad0f98","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104425","advisory_id":"a93bb2bc-575d-42cf-b0f3-4017cdad0f98","event_types":["advisory"],"published_at":"2026-10-24T22:53:27.059222+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:06.504+00:00","detail_url":"/events/7997"},"members":[{"id":7997,"cve_ids":["CVE-2026-104425"],"payload":{"kind":"advisory","title":"Zebra before 6.1.0 Batch-Verification Poisoning DoS via Unattributed Pushed Transactions","summary":"ZcashFoundation Zebra before 6.1.0 contains a resource exhaustion vulnerability that allows unauthenticated peers to degrade block processing by pushing transactions with invalid Orchard proofs without being misbehavior-scored. Attackers can repeatedly push invalid proofs into the shared halo2 batch verifier, forcing honest block proofs onto the slow individual-verification path and slowing block processing roughly sevenfold.","evidence":"cve:CVE-2026-104425","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-104425","aliases":["CVE-2026-104425"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"6.1.0","versionType":"semver"},{"status":"unaffected","version":"6.1.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-02T15:35:22.404Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-g7c4-2w6c-cr3r","https://www.vulncheck.com/advisories/zebra-before-6.1.0-batch-verification-poisoning-dos-via-unattributed-pushed-transactions"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104425","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-02T15:34:04.808428Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-02T15:35:22.404Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:06.504Z"}}},"related_cves":[{"value":"CVE-2026-104425","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:a93bb2bc-575d-42cf-b0f3-4017cdad0f98","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104425","advisory_id":"a93bb2bc-575d-42cf-b0f3-4017cdad0f98","event_types":["advisory"],"published_at":"2026-10-24T22:53:27.059222+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:06.504+00:00","detail_url":"/events/7997"}]}},{"id":7997,"cve_ids":["CVE-2026-104430"],"payload":{"kind":"advisory","title":"Zebra 4.5.0 Consensus Split via P2SH Sigop Overcount","summary":"Zebra zebrad 4.5.0 and zebra-script 7.0.0 count P2SH redeem script signature operations in legacy mode rather than zcashd's accurate P2SH mode, overcounting CHECKMULTISIG preceded by OP_1 through OP_16 as 20 sigops and causing a consensus divergence. Remote attackers can broadcast P2SH spends using low-threshold multisig redeem scripts so that a block zcashd accepts exceeds Zebra's inflated MAX_BLOCK_SIGOPS count, causing Zebra nodes to reject it and stall off the chain.","evidence":"cve:CVE-2026-104430","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"zebra","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-104430","aliases":["CVE-2026-104430"],"metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":8.7,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"HIGH","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"4.5.0","lessThan":"4.5.1","versionType":"semver"},{"status":"unaffected","version":"4.5.1","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"},{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"7.0.0","lessThan":"7.0.1","versionType":"semver"},{"status":"unaffected","version":"7.0.1","versionType":"semver"}],"packageURL":"pkg:cargo/zebra-script","defaultStatus":"unaffected"}],"modified":"2026-10-02T15:17:44.203Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-2prc-cj5x-4443","https://www.vulncheck.com/advisories/zebra-4.5.0-consensus-split-via-p2sh-sigop-overcount"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104430","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-02T15:17:26.296433Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-02T15:17:44.203Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:09.916Z"}}},"related_cves":[{"value":"CVE-2026-104430","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:d6032334-d87a-4b6d-bfe4-1c82d792d1b5","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104430","advisory_id":"d6032334-d87a-4b6d-bfe4-1c82d792d1b5","event_types":["advisory"],"published_at":"2026-10-24T22:53:24.654888+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:09.916+00:00","detail_url":"/advisories/advisory%3Ad6032334-d87a-4b6d-bfe4-1c82d792d1b5","group":{"id":"advisory:d6032334-d87a-4b6d-bfe4-1c82d792d1b5","revision":1,"primary_event_id":7993,"change":"published","superseded_by":[],"changed":{"id":7993,"cve_ids":["CVE-2026-104430"],"payload":{"kind":"advisory","title":"Zebra 4.5.0 Consensus Split via P2SH Sigop Overcount","summary":"Zebra zebrad 4.5.0 and zebra-script 7.0.0 count P2SH redeem script signature operations in legacy mode rather than zcashd's accurate P2SH mode, overcounting CHECKMULTISIG preceded by OP_1 through OP_16 as 20 sigops and causing a consensus divergence. Remote attackers can broadcast P2SH spends using low-threshold multisig redeem scripts so that a block zcashd accepts exceeds Zebra's inflated MAX_BLOCK_SIGOPS count, causing Zebra nodes to reject it and stall off the chain.","evidence":"cve:CVE-2026-104430","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"zebra","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-104430","aliases":["CVE-2026-104430"],"metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":8.7,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"HIGH","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"4.5.0","lessThan":"4.5.1","versionType":"semver"},{"status":"unaffected","version":"4.5.1","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"},{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"7.0.0","lessThan":"7.0.1","versionType":"semver"},{"status":"unaffected","version":"7.0.1","versionType":"semver"}],"packageURL":"pkg:cargo/zebra-script","defaultStatus":"unaffected"}],"modified":"2026-10-02T15:17:44.203Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-2prc-cj5x-4443","https://www.vulncheck.com/advisories/zebra-4.5.0-consensus-split-via-p2sh-sigop-overcount"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104430","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-02T15:17:26.296433Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-02T15:17:44.203Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:09.916Z"}}},"related_cves":[{"value":"CVE-2026-104430","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:d6032334-d87a-4b6d-bfe4-1c82d792d1b5","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104430","advisory_id":"d6032334-d87a-4b6d-bfe4-1c82d792d1b5","event_types":["advisory"],"published_at":"2026-10-24T22:53:24.654888+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:09.916+00:00","detail_url":"/events/7993"},"members":[{"id":7993,"cve_ids":["CVE-2026-104430"],"payload":{"kind":"advisory","title":"Zebra 4.5.0 Consensus Split via P2SH Sigop Overcount","summary":"Zebra zebrad 4.5.0 and zebra-script 7.0.0 count P2SH redeem script signature operations in legacy mode rather than zcashd's accurate P2SH mode, overcounting CHECKMULTISIG preceded by OP_1 through OP_16 as 20 sigops and causing a consensus divergence. Remote attackers can broadcast P2SH spends using low-threshold multisig redeem scripts so that a block zcashd accepts exceeds Zebra's inflated MAX_BLOCK_SIGOPS count, causing Zebra nodes to reject it and stall off the chain.","evidence":"cve:CVE-2026-104430","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"zebra","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-104430","aliases":["CVE-2026-104430"],"metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":8.7,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"HIGH","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"4.5.0","lessThan":"4.5.1","versionType":"semver"},{"status":"unaffected","version":"4.5.1","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"},{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"7.0.0","lessThan":"7.0.1","versionType":"semver"},{"status":"unaffected","version":"7.0.1","versionType":"semver"}],"packageURL":"pkg:cargo/zebra-script","defaultStatus":"unaffected"}],"modified":"2026-10-02T15:17:44.203Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-2prc-cj5x-4443","https://www.vulncheck.com/advisories/zebra-4.5.0-consensus-split-via-p2sh-sigop-overcount"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104430","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-02T15:17:26.296433Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-02T15:17:44.203Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:09.916Z"}}},"related_cves":[{"value":"CVE-2026-104430","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:d6032334-d87a-4b6d-bfe4-1c82d792d1b5","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104430","advisory_id":"d6032334-d87a-4b6d-bfe4-1c82d792d1b5","event_types":["advisory"],"published_at":"2026-10-24T22:53:24.654888+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:09.916+00:00","detail_url":"/events/7993"}]}},{"id":7994,"cve_ids":["CVE-2026-104426"],"payload":{"kind":"advisory","title":"Zebra before 6.1.0 Quadratic Complexity DoS via Block Transparent Value Check","summary":"Zebra before 6.1.0 contains an inefficient algorithmic complexity vulnerability in remaining_transaction_value that clones the entire block-level spent-UTXO map per transaction during contextual verification. Attackers can mine or seed the mempool with roughly 26,000 minimal single-input transactions in one block, stalling every validating node for over 52 seconds.","evidence":"cve:CVE-2026-104426","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-104426","aliases":["CVE-2026-104426"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"6.1.0","versionType":"semver"},{"status":"unaffected","version":"6.1.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-02T15:18:42.536Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-4g24-549m-hp75","https://www.vulncheck.com/advisories/zebra-before-6.1.0-quadratic-complexity-dos-via-block-transparent-value-check"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104426","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-02T15:18:27.097171Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-02T15:18:42.536Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:07.187Z"}}},"related_cves":[{"value":"CVE-2026-104426","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:b01594dd-f30b-49a4-8f63-0ab77b228a08","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104426","advisory_id":"b01594dd-f30b-49a4-8f63-0ab77b228a08","event_types":["advisory"],"published_at":"2026-10-24T22:53:22.854607+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:07.187+00:00","detail_url":"/advisories/advisory%3Ab01594dd-f30b-49a4-8f63-0ab77b228a08","group":{"id":"advisory:b01594dd-f30b-49a4-8f63-0ab77b228a08","revision":1,"primary_event_id":7990,"change":"published","superseded_by":[],"changed":{"id":7990,"cve_ids":["CVE-2026-104426"],"payload":{"kind":"advisory","title":"Zebra before 6.1.0 Quadratic Complexity DoS via Block Transparent Value Check","summary":"Zebra before 6.1.0 contains an inefficient algorithmic complexity vulnerability in remaining_transaction_value that clones the entire block-level spent-UTXO map per transaction during contextual verification. Attackers can mine or seed the mempool with roughly 26,000 minimal single-input transactions in one block, stalling every validating node for over 52 seconds.","evidence":"cve:CVE-2026-104426","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-104426","aliases":["CVE-2026-104426"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"6.1.0","versionType":"semver"},{"status":"unaffected","version":"6.1.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-02T15:18:42.536Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-4g24-549m-hp75","https://www.vulncheck.com/advisories/zebra-before-6.1.0-quadratic-complexity-dos-via-block-transparent-value-check"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104426","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-02T15:18:27.097171Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-02T15:18:42.536Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:07.187Z"}}},"related_cves":[{"value":"CVE-2026-104426","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:b01594dd-f30b-49a4-8f63-0ab77b228a08","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104426","advisory_id":"b01594dd-f30b-49a4-8f63-0ab77b228a08","event_types":["advisory"],"published_at":"2026-10-24T22:53:22.854607+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:07.187+00:00","detail_url":"/events/7990"},"members":[{"id":7990,"cve_ids":["CVE-2026-104426"],"payload":{"kind":"advisory","title":"Zebra before 6.1.0 Quadratic Complexity DoS via Block Transparent Value Check","summary":"Zebra before 6.1.0 contains an inefficient algorithmic complexity vulnerability in remaining_transaction_value that clones the entire block-level spent-UTXO map per transaction during contextual verification. Attackers can mine or seed the mempool with roughly 26,000 minimal single-input transactions in one block, stalling every validating node for over 52 seconds.","evidence":"cve:CVE-2026-104426","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-104426","aliases":["CVE-2026-104426"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"6.1.0","versionType":"semver"},{"status":"unaffected","version":"6.1.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-02T15:18:42.536Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-4g24-549m-hp75","https://www.vulncheck.com/advisories/zebra-before-6.1.0-quadratic-complexity-dos-via-block-transparent-value-check"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104426","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-02T15:18:27.097171Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-02T15:18:42.536Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:07.187Z"}}},"related_cves":[{"value":"CVE-2026-104426","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:b01594dd-f30b-49a4-8f63-0ab77b228a08","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104426","advisory_id":"b01594dd-f30b-49a4-8f63-0ab77b228a08","event_types":["advisory"],"published_at":"2026-10-24T22:53:22.854607+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:07.187+00:00","detail_url":"/events/7990"}]}},{"id":7984,"cve_ids":["CVE-2026-104436"],"payload":{"kind":"advisory","title":"Zebra before 4.5.0 CPU Amplification via Uncapped getblocks/getheaders Locator Length","summary":"Zebra before 4.5.0 contains an uncontrolled resource consumption vulnerability that allows remote P2P peers to exhaust blocking-pool threads by sending oversized block locator vectors. Attackers can send getblocks or getheaders messages with up to 65,535 locator hashes, triggering per-hash chain lookups that degrade block validation, RPC, and mempool performance.","evidence":"cve:CVE-2026-104436","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"zebra","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-104436","aliases":["CVE-2026-104436"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":6.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.7,"attackVector":"NETWORK","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"4.5.0","versionType":"semver"},{"status":"unaffected","version":"4.5.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"},{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"8.0.0","versionType":"semver"},{"status":"unaffected","version":"8.0.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebra-chain","defaultStatus":"unaffected"}],"modified":"2026-10-02T14:51:28.130Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-443g-gwgp-49x4","https://www.vulncheck.com/advisories/zebra-before-4.5.0-cpu-amplification-via-uncapped-getblocks-getheaders-locator-length"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104436","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-02T14:51:19.938453Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-02T14:51:28.130Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:13.172Z"}}},"related_cves":[{"value":"CVE-2026-104436","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:0fdc496b-df58-4078-b25f-d47d8b5ddd70","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-104436","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"products":[{"name":{"value":"zebrad","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.5.0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"zebra-chain","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.0.0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"low","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-443g-gwgp-49x4","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":2,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104436","advisory_id":"0fdc496b-df58-4078-b25f-d47d8b5ddd70","event_types":["advisory"],"published_at":"2026-10-24T22:53:18.041158+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:13.172+00:00","detail_url":"/advisories/advisory%3A0fdc496b-df58-4078-b25f-d47d8b5ddd70","group":{"id":"advisory:0fdc496b-df58-4078-b25f-d47d8b5ddd70","revision":1,"primary_event_id":72828,"change":"published","superseded_by":[],"changed":{"id":7982,"cve_ids":["CVE-2026-104436"],"payload":{"kind":"advisory","title":"Zebra before 4.5.0 CPU Amplification via Uncapped getblocks/getheaders Locator Length","summary":"Zebra before 4.5.0 contains an uncontrolled resource consumption vulnerability that allows remote P2P peers to exhaust blocking-pool threads by sending oversized block locator vectors. Attackers can send getblocks or getheaders messages with up to 65,535 locator hashes, triggering per-hash chain lookups that degrade block validation, RPC, and mempool performance.","evidence":"cve:CVE-2026-104436","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"zebra","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-104436","aliases":["CVE-2026-104436"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":6.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.7,"attackVector":"NETWORK","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"4.5.0","versionType":"semver"},{"status":"unaffected","version":"4.5.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"},{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"8.0.0","versionType":"semver"},{"status":"unaffected","version":"8.0.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebra-chain","defaultStatus":"unaffected"}],"modified":"2026-10-02T14:51:28.130Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-443g-gwgp-49x4","https://www.vulncheck.com/advisories/zebra-before-4.5.0-cpu-amplification-via-uncapped-getblocks-getheaders-locator-length"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104436","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-02T14:51:19.938453Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-02T14:51:28.130Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:13.172Z"}}},"related_cves":[{"value":"CVE-2026-104436","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:0fdc496b-df58-4078-b25f-d47d8b5ddd70","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104436","advisory_id":"0fdc496b-df58-4078-b25f-d47d8b5ddd70","event_types":["advisory"],"published_at":"2026-10-24T22:53:18.041158+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:13.172+00:00","detail_url":"/events/7982"},"members":[{"id":72828,"cve_ids":["CVE-2026-104436"],"payload":{"kind":"advisory","title":"Zebra before 4.5.0 CPU Amplification via Uncapped getblocks/getheaders Locator Length","summary":"Zebra before 4.5.0 contains an uncontrolled resource consumption vulnerability that allows remote P2P peers to exhaust blocking-pool threads by sending oversized block locator vectors. Attackers can send getblocks or getheaders messages with up to 65,535 locator hashes, triggering per-hash chain lookups that degrade block validation, RPC, and mempool performance.","evidence":"cve:CVE-2026-104436","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"zebra","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-104436","aliases":["CVE-2026-104436"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":6.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.7,"attackVector":"NETWORK","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"4.5.0","versionType":"semver"},{"status":"unaffected","version":"4.5.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"},{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"8.0.0","versionType":"semver"},{"status":"unaffected","version":"8.0.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebra-chain","defaultStatus":"unaffected"}],"modified":"2026-10-02T14:51:28.130Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-443g-gwgp-49x4","https://www.vulncheck.com/advisories/zebra-before-4.5.0-cpu-amplification-via-uncapped-getblocks-getheaders-locator-length"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104436","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-02T14:51:19.938453Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-02T14:51:28.130Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:13.172Z"}}},"related_cves":[{"value":"CVE-2026-104436","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:0fdc496b-df58-4078-b25f-d47d8b5ddd70","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-104436","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"products":[{"name":{"value":"zebrad","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.5.0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"zebra-chain","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.0.0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"low","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-443g-gwgp-49x4","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":2,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104436","advisory_id":"0fdc496b-df58-4078-b25f-d47d8b5ddd70","event_types":["advisory"],"published_at":"2026-10-26T00:18:27.588492+00:00","technologies":["core-cve","zebra"],"context_update":true,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:13.172+00:00","detail_url":"/events/72828"}]}},{"id":7983,"cve_ids":["CVE-2026-104431"],"payload":{"kind":"advisory","title":"Zebra before 6.0.0 Denial of Service via Synchronous Script FFI Verification","summary":"Zebra before 6.0.0 contains a denial of service vulnerability that allows unauthenticated peers to stall Tokio workers by submitting mempool transactions requiring expensive synchronous script verification. Attackers can send non-standard high-sigop P2SH transactions that reach CachedFfiTransaction::is_valid() before standardness checks, saturating the verifier buffer and rendering the node unresponsive.","evidence":"cve:CVE-2026-104431","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-104431","aliases":["CVE-2026-104431"],"metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":8.7,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"HIGH","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"6.0.0","versionType":"semver"},{"status":"unaffected","version":"6.0.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-02T14:53:54.651Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-84j3-rw4c-gqmj","https://www.vulncheck.com/advisories/zebra-before-6.0.0-denial-of-service-via-synchronous-script-ffi-verification"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104431","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-02T14:53:45.702420Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-02T14:53:54.651Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:10.560Z"}}},"related_cves":[{"value":"CVE-2026-104431","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:cfa82e33-829d-4b0a-b0e7-c5161863e560","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104431","advisory_id":"cfa82e33-829d-4b0a-b0e7-c5161863e560","event_types":["advisory"],"published_at":"2026-10-24T22:53:17.45141+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:10.56+00:00","detail_url":"/advisories/advisory%3Acfa82e33-829d-4b0a-b0e7-c5161863e560","group":{"id":"advisory:cfa82e33-829d-4b0a-b0e7-c5161863e560","revision":1,"primary_event_id":7981,"change":"published","superseded_by":[],"changed":{"id":7981,"cve_ids":["CVE-2026-104431"],"payload":{"kind":"advisory","title":"Zebra before 6.0.0 Denial of Service via Synchronous Script FFI Verification","summary":"Zebra before 6.0.0 contains a denial of service vulnerability that allows unauthenticated peers to stall Tokio workers by submitting mempool transactions requiring expensive synchronous script verification. Attackers can send non-standard high-sigop P2SH transactions that reach CachedFfiTransaction::is_valid() before standardness checks, saturating the verifier buffer and rendering the node unresponsive.","evidence":"cve:CVE-2026-104431","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-104431","aliases":["CVE-2026-104431"],"metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":8.7,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"HIGH","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"6.0.0","versionType":"semver"},{"status":"unaffected","version":"6.0.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-02T14:53:54.651Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-84j3-rw4c-gqmj","https://www.vulncheck.com/advisories/zebra-before-6.0.0-denial-of-service-via-synchronous-script-ffi-verification"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104431","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-02T14:53:45.702420Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-02T14:53:54.651Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:10.560Z"}}},"related_cves":[{"value":"CVE-2026-104431","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:cfa82e33-829d-4b0a-b0e7-c5161863e560","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104431","advisory_id":"cfa82e33-829d-4b0a-b0e7-c5161863e560","event_types":["advisory"],"published_at":"2026-10-24T22:53:17.45141+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:10.56+00:00","detail_url":"/events/7981"},"members":[{"id":7981,"cve_ids":["CVE-2026-104431"],"payload":{"kind":"advisory","title":"Zebra before 6.0.0 Denial of Service via Synchronous Script FFI Verification","summary":"Zebra before 6.0.0 contains a denial of service vulnerability that allows unauthenticated peers to stall Tokio workers by submitting mempool transactions requiring expensive synchronous script verification. Attackers can send non-standard high-sigop P2SH transactions that reach CachedFfiTransaction::is_valid() before standardness checks, saturating the verifier buffer and rendering the node unresponsive.","evidence":"cve:CVE-2026-104431","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-104431","aliases":["CVE-2026-104431"],"metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":8.7,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"HIGH","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"6.0.0","versionType":"semver"},{"status":"unaffected","version":"6.0.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-02T14:53:54.651Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-84j3-rw4c-gqmj","https://www.vulncheck.com/advisories/zebra-before-6.0.0-denial-of-service-via-synchronous-script-ffi-verification"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104431","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-02T14:53:45.702420Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-02T14:53:54.651Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:10.560Z"}}},"related_cves":[{"value":"CVE-2026-104431","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:cfa82e33-829d-4b0a-b0e7-c5161863e560","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104431","advisory_id":"cfa82e33-829d-4b0a-b0e7-c5161863e560","event_types":["advisory"],"published_at":"2026-10-24T22:53:17.45141+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:10.56+00:00","detail_url":"/events/7981"}]}},{"id":7907,"cve_ids":["CVE-2026-104429"],"payload":{"kind":"advisory","title":"Zebra before 6.0.0-rc.0 Per-Peer Mempool Admission Bypass via P2P tx Messages","summary":"Zebra (zebrad) 5.0.0 before 6.0.0-rc.0 does not apply its per-peer mempool admission cap to transactions received as direct P2P tx messages, because these are queued without the sending peer recorded as their source. A remote inbound peer can push many unique transactions to occupy a disproportionate share of mempool admission slots, crowding out honest peers' transaction relay.","evidence":"cve:CVE-2026-104429","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-104429","aliases":["CVE-2026-104429"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"6.0.0-rc.0","versionType":"semver"},{"status":"unaffected","version":"6.0.0-rc.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-02T12:27:23.589Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-m9xx-8rcj-vmgp","https://www.vulncheck.com/advisories/zebra-before-6.0.0-rc.0-per-peer-mempool-admission-bypass-via-p2p-tx-messages"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104429","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-02T12:27:13.306414Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-02T12:27:23.589Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:09.257Z"}}},"related_cves":[{"value":"CVE-2026-104429","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:1a9a3dbd-6939-43c9-af68-56aa55fe7889","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104429","advisory_id":"1a9a3dbd-6939-43c9-af68-56aa55fe7889","event_types":["advisory"],"published_at":"2026-10-24T22:52:28.287742+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:09.257+00:00","detail_url":"/advisories/advisory%3A1a9a3dbd-6939-43c9-af68-56aa55fe7889","group":{"id":"advisory:1a9a3dbd-6939-43c9-af68-56aa55fe7889","revision":1,"primary_event_id":7905,"change":"published","superseded_by":[],"changed":{"id":7905,"cve_ids":["CVE-2026-104429"],"payload":{"kind":"advisory","title":"Zebra before 6.0.0-rc.0 Per-Peer Mempool Admission Bypass via P2P tx Messages","summary":"Zebra (zebrad) 5.0.0 before 6.0.0-rc.0 does not apply its per-peer mempool admission cap to transactions received as direct P2P tx messages, because these are queued without the sending peer recorded as their source. A remote inbound peer can push many unique transactions to occupy a disproportionate share of mempool admission slots, crowding out honest peers' transaction relay.","evidence":"cve:CVE-2026-104429","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-104429","aliases":["CVE-2026-104429"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"6.0.0-rc.0","versionType":"semver"},{"status":"unaffected","version":"6.0.0-rc.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-02T12:27:23.589Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-m9xx-8rcj-vmgp","https://www.vulncheck.com/advisories/zebra-before-6.0.0-rc.0-per-peer-mempool-admission-bypass-via-p2p-tx-messages"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104429","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-02T12:27:13.306414Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-02T12:27:23.589Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:09.257Z"}}},"related_cves":[{"value":"CVE-2026-104429","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:1a9a3dbd-6939-43c9-af68-56aa55fe7889","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104429","advisory_id":"1a9a3dbd-6939-43c9-af68-56aa55fe7889","event_types":["advisory"],"published_at":"2026-10-24T22:52:28.287742+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:09.257+00:00","detail_url":"/events/7905"},"members":[{"id":7905,"cve_ids":["CVE-2026-104429"],"payload":{"kind":"advisory","title":"Zebra before 6.0.0-rc.0 Per-Peer Mempool Admission Bypass via P2P tx Messages","summary":"Zebra (zebrad) 5.0.0 before 6.0.0-rc.0 does not apply its per-peer mempool admission cap to transactions received as direct P2P tx messages, because these are queued without the sending peer recorded as their source. A remote inbound peer can push many unique transactions to occupy a disproportionate share of mempool admission slots, crowding out honest peers' transaction relay.","evidence":"cve:CVE-2026-104429","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-104429","aliases":["CVE-2026-104429"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"6.0.0-rc.0","versionType":"semver"},{"status":"unaffected","version":"6.0.0-rc.0","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-02T12:27:23.589Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-m9xx-8rcj-vmgp","https://www.vulncheck.com/advisories/zebra-before-6.0.0-rc.0-per-peer-mempool-admission-bypass-via-p2p-tx-messages"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104429","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-02T12:27:13.306414Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-02T12:27:23.589Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:09.257Z"}}},"related_cves":[{"value":"CVE-2026-104429","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:1a9a3dbd-6939-43c9-af68-56aa55fe7889","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104429","advisory_id":"1a9a3dbd-6939-43c9-af68-56aa55fe7889","event_types":["advisory"],"published_at":"2026-10-24T22:52:28.287742+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:09.257+00:00","detail_url":"/events/7905"}]}},{"id":7906,"cve_ids":["CVE-2026-104421"],"payload":{"kind":"advisory","title":"Zebra before 6.2.1 Block Download Denial of Service via KnownBlock SentHashes Lockout","summary":"Zebra before 6.2.1 contains an incomplete cleanup vulnerability that allows unauthenticated peers to block downloading of valid blocks by leaving rejected hashes in SentHashes. Attackers can send a contextually invalid block sharing an honest block's header hash, causing Request::KnownBlock to skip the honest block and keep nodes behind the tip.","evidence":"cve:CVE-2026-104421","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-104421","aliases":["CVE-2026-104421"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"6.2.1","versionType":"semver"},{"status":"unaffected","version":"6.2.1","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-02T12:28:10.585Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-x93j-mj2f-q338","https://www.vulncheck.com/advisories/zebra-before-6.2.1-block-download-denial-of-service-via-knownblock-senthashes-lockout"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104421","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-02T12:27:43.846358Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-02T12:28:10.585Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:02.456Z"}}},"related_cves":[{"value":"CVE-2026-104421","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:6184cb43-b266-4598-957e-92d5226e709a","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104421","advisory_id":"6184cb43-b266-4598-957e-92d5226e709a","event_types":["advisory"],"published_at":"2026-10-24T22:52:27.456122+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:02.456+00:00","detail_url":"/advisories/advisory%3A6184cb43-b266-4598-957e-92d5226e709a","group":{"id":"advisory:6184cb43-b266-4598-957e-92d5226e709a","revision":1,"primary_event_id":7904,"change":"published","superseded_by":[],"changed":{"id":7904,"cve_ids":["CVE-2026-104421"],"payload":{"kind":"advisory","title":"Zebra before 6.2.1 Block Download Denial of Service via KnownBlock SentHashes Lockout","summary":"Zebra before 6.2.1 contains an incomplete cleanup vulnerability that allows unauthenticated peers to block downloading of valid blocks by leaving rejected hashes in SentHashes. Attackers can send a contextually invalid block sharing an honest block's header hash, causing Request::KnownBlock to skip the honest block and keep nodes behind the tip.","evidence":"cve:CVE-2026-104421","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-104421","aliases":["CVE-2026-104421"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"6.2.1","versionType":"semver"},{"status":"unaffected","version":"6.2.1","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-02T12:28:10.585Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-x93j-mj2f-q338","https://www.vulncheck.com/advisories/zebra-before-6.2.1-block-download-denial-of-service-via-knownblock-senthashes-lockout"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104421","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-02T12:27:43.846358Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-02T12:28:10.585Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:02.456Z"}}},"related_cves":[{"value":"CVE-2026-104421","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:6184cb43-b266-4598-957e-92d5226e709a","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104421","advisory_id":"6184cb43-b266-4598-957e-92d5226e709a","event_types":["advisory"],"published_at":"2026-10-24T22:52:27.456122+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:02.456+00:00","detail_url":"/events/7904"},"members":[{"id":7904,"cve_ids":["CVE-2026-104421"],"payload":{"kind":"advisory","title":"Zebra before 6.2.1 Block Download Denial of Service via KnownBlock SentHashes Lockout","summary":"Zebra before 6.2.1 contains an incomplete cleanup vulnerability that allows unauthenticated peers to block downloading of valid blocks by leaving rejected hashes in SentHashes. Attackers can send a contextually invalid block sharing an honest block's header hash, causing Request::KnownBlock to skip the honest block and keep nodes behind the tip.","evidence":"cve:CVE-2026-104421","products":[{"name":{"value":"zebra","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-104421","aliases":["CVE-2026-104421"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"ZcashFoundation","product":"zebra","versions":[{"status":"affected","version":"0","lessThan":"6.2.1","versionType":"semver"},{"status":"unaffected","version":"6.2.1","versionType":"semver"}],"packageURL":"pkg:cargo/zebrad","defaultStatus":"unaffected"}],"modified":"2026-10-02T12:28:10.585Z","provider":"cve","references":["https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-x93j-mj2f-q338","https://www.vulncheck.com/advisories/zebra-before-6.2.1-block-download-denial-of-service-via-knownblock-senthashes-lockout"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-104421","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-02T12:27:43.846358Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-02T12:28:10.585Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-02T11:38:02.456Z"}}},"related_cves":[{"value":"CVE-2026-104421","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:6184cb43-b266-4598-957e-92d5226e709a","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104421","advisory_id":"6184cb43-b266-4598-957e-92d5226e709a","event_types":["advisory"],"published_at":"2026-10-24T22:52:27.456122+00:00","technologies":["core-cve","zebra"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:38:02.456+00:00","detail_url":"/events/7904"}]}}],"next_after":72190,"next_before":7906}