CVE-2026-109366
3.7 LOWpublic exploit availablePublished 2026-10-12 · Updated 2026-10-16
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
Zebra before 6.4.0 contains an improper integrity validation vulnerability in the inbound gossip download path that allows unauthenticated peers to force dropping of new blocks without penalty. Attackers can serve a real block with a coinbase scriptSig rewritten to height 1, which keeps the ZIP-244 block hash, triggering a behind-tip drop before consensus validation and delaying tip discovery for mining backends.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Weaknesses
CWE-354
Public exploit & PoC references
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- UNSCOREDCVE-2026-102759PoC
- UNSCOREDCVE-2026-103601PoC
- UNSCOREDCVE-2026-105280PoC
- MEDIUMCVE-2026-106434
- UNSCOREDCVE-2026-15999PoC
- UNSCOREDCVE-2026-16001PoC
- UNSCOREDCVE-2026-54578PoC
- UNSCOREDCVE-2026-54580PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.