6 matches found
CVE-2026-109364
Zebra 2.3.0 before 6.4.0 contains a protection mechanism failure that allows unauthenticated peers to evade bans because bans and misbehavior scores are keyed on exact IP addresses. Attackers can reconnect from fresh IPv6 addresses in their /64 allocation or flush the 20,000-entry FIFO ban list t...
EUVD-2026-97666
Zebra 2.3.0 before 6.4.0 contains a protection mechanism failure that allows unauthenticated peers to evade bans because bans and misbehavior scores are keyed on exact IP addresses. Attackers can reconnect from fresh IPv6 addresses in their /64 allocation or flush the 20,000-entry FIFO ban list t...
CVE-2026-109364
Zebra 2.3.0 before 6.4.0 contains a protection mechanism failure that allows unauthenticated peers to evade bans because bans and misbehavior scores are keyed on exact IP addresses. Attackers can reconnect from fresh IPv6 addresses in their /64 allocation or flush the 20,000-entry FIFO ban list t...
CVE-2026-109364
Zebra version 2.3.0 before 6.4.0 is vulnerable to a protection mechanism failure (CWE-693) that allows unauthenticated peers to bypass IP-based bans. The root cause is that bans and misbehavior scores are keyed on exact IP addresses rather than wider network prefixes. Attackers can evade these re...
PT-2026-110781
Name of the Vulnerable Software and Affected Versions Zebra versions 2.3.0 through 6.3.x Description A protection mechanism failure allows unauthenticated peers to evade bans. This occurs because bans and misbehavior scores are keyed on exact IP addresses. Attackers can bypass these restrictions ...
CVE-2026-109364: Protection Mechanism Failure
Zebra 2.3.0 before 6.4.0 contains a protection mechanism failure that allows unauthenticated peers to evade bans because bans and misbehavior scores are keyed on exact IP addresses. Attackers can reconnect from fresh IPv6 addresses in their /64 allocation or flush the 20,000-entry FIFO ban list t...