CVE-2026-109366

The Zebra software, prior to version 6.4.0 , is vulnerable to an improper integrity validation flaw in the inbound gossip download path. This allows unauthenticated peers to force the dropping of new blocks without penalty by serving a real block with a rewritten coinbase scriptSig set to height ...