CVE-2026-123557 Zebra zebrad before 7.0.0 Reachable Assertion DoS via Peer Disconnection

ZcashFoundation Zebra zebrad before 7.0.0 contains a reachable assertion race condition that allows unauthenticated remote peers to abort the node by triggering disconnection during a blocked outbound send. Malicious peers can return empty FindBlocks or FindHeaders replies and stop reading their...

CVE-2026-123557

ZcashFoundation Zebra zebrad versions before 7.0.0 are vulnerable to a reachable assertion race condition . This flaw allows unauthenticated remote peers to cause a Denial of Service (DoS) by triggering a disconnection during a blocked outbound send. Specifically, a malicious peer can return empt...

CVE-2026-123557: ZcashFoundation zebra: ZcashFoundation Zebra zebrad before 7.0.0 contains a reachable assertion race condition that allows unauthenticated…

ZcashFoundation Zebra zebrad before 7.0.0 contains a reachable assertion race condition that allows unauthenticated remote peers to abort the node by triggering disconnection during a blocked outbound send. Malicious peers can return empty FindBlocks or FindHeaders replies and stop reading their...