CVE-2026-104419

Zebra zebrad 4.5.0 before 6.3.0 discards which peer supplied the block hashes in FindBlocks responses, then assigns 100 misbehavior points, the ban threshold, to whichever peer serves a requested block more than 50,000 heights above the tip. A remote peer can return real far-ahead hashes to a...

CVE-2026-104419 Zebra before 6.3.0 Honest Peer Banning via Far-Ahead FindBlocks Hashes

Zebra zebrad 4.5.0 before 6.3.0 discards which peer supplied the block hashes in FindBlocks responses, then assigns 100 misbehavior points, the ban threshold, to whichever peer serves a requested block more than 50,000 heights above the tip. A remote peer can return real far-ahead hashes to a...

CVE-2026-104419 Zebra before 6.3.0 Honest Peer Banning via Far-Ahead FindBlocks Hashes

Zebra zebrad 4.5.0 before 6.3.0 discards which peer supplied the block hashes in FindBlocks responses, then assigns 100 misbehavior points, the ban threshold, to whichever peer serves a requested block more than 50,000 heights above the tip. A remote peer can return real far-ahead hashes to a...

CVE-2026-104419 Zebra before 6.3.0 Honest Peer Banning via Far-Ahead FindBlocks Hashes

Zebra zebrad 4.5.0 before 6.3.0 discards which peer supplied the block hashes in FindBlocks responses, then assigns 100 misbehavior points, the ban threshold, to whichever peer serves a requested block more than 50,000 heights above the tip. A remote peer can return real far-ahead hashes to a...

EUVD-2026-91430

Zebra zebrad 4.5.0 before 6.3.0 discards which peer supplied the block hashes in FindBlocks responses, then assigns 100 misbehavior points, the ban threshold, to whichever peer serves a requested block more than 50,000 heights above the tip. A remote peer can return real far-ahead hashes to a...

CVE-2026-104419

The Zebra (zebrad) software, versions 4.5.0 before 6.3.0 , is vulnerable to a logic flaw in how it handles FindBlocks responses. The software fails to track which peer provided specific block hashes, leading it to assign 100 misbehavior points (the ban threshold) to any peer that serves a block m...

CVE-2026-104419: Insufficient Verification of Data Authenticity

Zebra zebrad 4.5.0 before 6.3.0 discards which peer supplied the block hashes in FindBlocks responses, then assigns 100 misbehavior points, the ban threshold, to whichever peer serves a requested block more than 50,000 heights above the tip. A remote peer can return real far-ahead hashes to a...

PT-2026-104230

Name of the Vulnerable Software and Affected Versions Zebra zebrad versions 4.5.0 through 6.2.0 Description The software fails to track which peer supplied block hashes in FindBlocks responses. It assigns 100 misbehavior points, which is the ban threshold, to any peer that serves a requested bloc...