CVE-2026-104427

Zebra versions before 6.1.0 are vulnerable to an incomplete cleanup vulnerability within the state write task . This flaw allows remote unauthenticated peers to stall node synchronization by poisoning the parent_error_map . Specifically, an attacker can deliver a coinbase-malleated block that sha...