CVE-2026-104419

Zebra zebrad 4.5.0 before 6.3.0 discards which peer supplied the block hashes in FindBlocks responses, then assigns 100 misbehavior points, the ban threshold, to whichever peer serves a requested block more than 50,000 heights above the tip. A remote peer can return real far-ahead hashes to a...

PT-2026-104230

Name of the Vulnerable Software and Affected Versions Zebra zebrad versions 4.5.0 through 6.2.0 Description The software fails to track which peer supplied block hashes in FindBlocks responses. It assigns 100 misbehavior points, which is the ban threshold, to any peer that serves a requested bloc...