CVE-2026-123558High· 7.5▾ TwilightZebra zebrad before 7.0.0 contains a denial of service vulnerability that allows a malicious peer to stall checkpoint sync by cancelling the verifier rewind after a failed commit. Attackers can serve a forged block with altered authorizi…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Zebra zebrad before 7.0.0 contains a denial of service vulnerability that allows a malicious peer to stall checkpoint sync by cancelling the verifier rewind after a failed commit. Attackers can serve a forged block with altered authorizing data plus a restart-triggering block, leaving the verifier rejecting honest blocks until restart.
zebra < 7.0.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-123554High· 7.5Zebra zebrad 6.4.0 before 7.0.0 Denial of Service via Mempool Coinbase-Maturity Check
CVE-2026-123555High· 7.5Zebra 2.3.0 before 7.0.0 Denial of Service via Unscored Script Verification Failures
CVE-2026-123556Medium· 5.3Zebra 4.5.0 before 7.0.0 Honest Peer Ban via Mempool Lock-Time Scoring
CVE-2026-123557Medium· 5.9Zebra zebrad before 7.0.0 Reachable Assertion DoS via Peer Disconnection
CVE-2026-123560High· 7.5Zebra before 7.0.0 Sync Denial of Service via Forged Checkpoint Block Body
CVE-2026-123559High· 7.5Zebra before 7.0.0 Denial of Service via Quadratic Sighash Computation