CVE-2026-123556

5.3 MEDIUMpublic exploit available

Published 2026-11-08 · Updated 2026-11-08

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

ZcashFoundation Zebra from 4.5.0 before 7.0.0 contains a protection mechanism failure that bans honest peers by scoring mempool lock-time rejections at the ban threshold. Attackers can broadcast transactions locked until the current height right after each block, causing lagging nodes to ban honest relaying peers for 24 hours or until restart.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Weaknesses

CWE-693

Public exploit & PoC references

https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-5h3r-fpmj-483w

All references

https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-5h3r-fpmj-483w
https://www.vulncheck.com/advisories/zebra-4.5.0-before-7.0.0-honest-peer-ban-via-mempool-lock-time-scoring

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

MEDIUMCVE-2025-54991PoC
MEDIUMCVE-2025-55002PoC
LOWCVE-2025-71424PoC
HIGHCVE-2026-100676PoC
CRITICALCVE-2026-100760
CRITICALCVE-2026-100775
HIGHCVE-2026-100808
CRITICALCVE-2026-100828

Related by shared AI tags and CWE weakness class. Browse the full archive.