{"id":"EUVD-2026-21146","enisaUuid":"1a2e36c5-ae5e-37fd-bef1-bc0858b1254f","description":"nimiq-blockchain provides persistent block storage for Nimiq\u0027s Rust implementation. In 1.3.0 and earlier, block timestamp validation enforces that timestamp \u003e\u003d parent.timestamp for non-skip blocks and timestamp \u003d\u003d parent.timestamp + MIN_PRODUCER_TIMEOUT for skip blocks, but there is no visible upper bound check against the wall clock. A malicious block-producing validator can set block timestamps arbitrarily far in the future. This directly affects reward calculations via Policy::supply_at() and batch_delay() in blockchain/src/reward.rs, inflating the monetary supply beyond the intended emission schedule.","datePublished":"Apr 9, 2026, 8:29:46 PM","dateUpdated":"Apr 13, 2026, 3:38:14 PM","baseScore":8.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","references":"https://github.com/nimiq/core-rs-albatross/security/advisories/GHSA-49xc-52mp-cc9j\n","aliases":"CVE-2026-40093\nGHSA-49xc-52mp-cc9j\n","assigner":"GitHub_M","epss":0.31,"enisaIdProduct":[{"id":"6cdcafe7-5926-316f-9586-b91f5852e0e8","product":{"name":"core-rs-albatross","vendor":{"name":"nimiq"}},"product_version":"≤ 1.3.0"}],"enisaIdVendor":[{"id":"08a88d1f-2116-3ca5-856c-bd62621b4748","vendor":{"name":"nimiq"}}],"enisaIdVulnerability":[{"id":"2e9d2963-9f08-37b3-97df-6991f602498d","vulnerability":{"id":"GHSA-49xc-52mp-cc9j","description":"nimiq-blockchain is missing a wall-clock upper bound on block timestamps","datePublished":"Apr 10, 2026, 7:55:04 PM","dateUpdated":"Apr 10, 2026, 7:55:04 PM","baseScore":0.0,"references":"https://github.com/nimiq/core-rs-albatross/security/advisories/GHSA-49xc-52mp-cc9j\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-40093\nhttps://github.com/nimiq/core-rs-albatross\n","enisa_id":"EUVD-2026-21146\n","aliases":"CVE-2026-40093\nGHSA-49xc-52mp-cc9j\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 1:59:37 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"8239cac7-13de-3364-966b-5aba809eb2b6","vulnerability":{"id":"CVE-2026-40093","description":"nimiq-blockchain provides persistent block storage for Nimiq\u0027s Rust implementation. In 1.3.0 and earlier, block timestamp validation enforces that timestamp \u003e\u003d parent.timestamp for non-skip blocks and timestamp \u003d\u003d parent.timestamp + MIN_PRODUCER_TIMEOUT for skip blocks, but there is no visible upper bound check against the wall clock. A malicious block-producing validator can set block timestamps arbitrarily far in the future. This directly affects reward calculations via Policy::supply_at() and batch_delay() in blockchain/src/reward.rs, inflating the monetary supply beyond the intended emission schedule.","datePublished":"Apr 9, 2026, 8:29:46 PM","dateUpdated":"Apr 13, 2026, 3:38:14 PM","status":"PUBLISHED","baseScore":8.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","references":"https://github.com/nimiq/core-rs-albatross/security/advisories/GHSA-49xc-52mp-cc9j\n","enisa_id":"EUVD-2026-21146\n","assigner":"GitHub_M","epss":0.31,"dataProcessed":"Nov 1, 2026, 7:17:12 AM","vulnerabilityProduct":[{"id":"c7d0bfce-b17c-3168-aebe-569975a1c4b1","product":{"name":"core-rs-albatross","vendor":{"name":"nimiq"}},"product_version":"≤ 1.3.0"}],"vulnerabilityVendor":[{"id":"91fc9767-bfdd-3bf8-8108-ba424bd91f9c","vendor":{"name":"nimiq"}}]}}],"enisaIdAdvisory":[]}