{"id":"EUVD-2026-91446","enisaUuid":"2d2d2680-bee5-3293-b0f3-19ade3202e53","description":"Zebra before 4.5.0 contains an uncontrolled resource consumption vulnerability that allows remote P2P peers to exhaust blocking-pool threads by sending oversized block locator vectors. Attackers can send getblocks or getheaders messages with up to 65,535 locator hashes, triggering per-hash chain lookups that degrade block validation, RPC, and mempool performance.","datePublished":"Oct 2, 2026, 11:38:13 AM","dateUpdated":"Oct 2, 2026, 2:51:28 PM","baseScore":6.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","references":"https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-443g-gwgp-49x4\nhttps://www.vulncheck.com/advisories/zebra-before-4.5.0-cpu-amplification-via-uncapped-getblocks-getheaders-locator-length\n","aliases":"CVE-2026-104436\nGHSA-4m38-rccq-j8gv\n","assigner":"VulnCheck","epss":0.27,"enisaIdProduct":[{"id":"3a42eb4c-9d8a-3998-abf4-fd60b30dc922","product":{"name":"zebra","vendor":{"name":"ZcashFoundation"}},"product_version":"0 \u003c8.0.0"},{"id":"46c10cb2-d3cb-38f5-bcd8-0891f80b61e5","product":{"name":"zebra","vendor":{"name":"ZcashFoundation"}},"product_version":"0 \u003c4.5.0"}],"enisaIdVendor":[{"id":"3253bccc-159c-340e-b2c7-b923c0ff17f7","vendor":{"name":"ZcashFoundation"}}],"enisaIdVulnerability":[{"id":"3041c72c-e3db-3d3a-94f1-c8bce17dc758","vulnerability":{"id":"GHSA-4m38-rccq-j8gv","description":"Zebra before 4.5.0 contains an uncontrolled resource consumption vulnerability that allows remote P2P peers to exhaust blocking-pool threads by sending oversized block locator vectors. Attackers can send getblocks or getheaders messages with up to 65,535 locator hashes, triggering per-hash chain lookups that degrade block validation, RPC, and mempool performance.","datePublished":"Oct 2, 2026, 12:31:15 PM","dateUpdated":"Oct 2, 2026, 12:31:15 PM","baseScore":0.0,"references":"https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-443g-gwgp-49x4\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-104436\nhttps://www.vulncheck.com/advisories/zebra-before-4.5.0-cpu-amplification-via-uncapped-getblocks-getheaders-locator-length\n","enisa_id":"EUVD-2026-91446\n","aliases":"CVE-2026-104436\nGHSA-4m38-rccq-j8gv\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 2:02:26 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"92c13af9-3bdd-3b15-b3de-4ac73e9ba2ec","vulnerability":{"id":"CVE-2026-104436","description":"Zebra before 4.5.0 contains an uncontrolled resource consumption vulnerability that allows remote P2P peers to exhaust blocking-pool threads by sending oversized block locator vectors. Attackers can send getblocks or getheaders messages with up to 65,535 locator hashes, triggering per-hash chain lookups that degrade block validation, RPC, and mempool performance.","datePublished":"Oct 2, 2026, 11:38:13 AM","dateUpdated":"Oct 2, 2026, 2:51:28 PM","status":"PUBLISHED","baseScore":6.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","references":"https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-443g-gwgp-49x4\nhttps://www.vulncheck.com/advisories/zebra-before-4.5.0-cpu-amplification-via-uncapped-getblocks-getheaders-locator-length\n","enisa_id":"EUVD-2026-91446\n","assigner":"VulnCheck","epss":0.27,"dataProcessed":"Oct 27, 2026, 7:16:10 AM","vulnerabilityProduct":[{"id":"5240302b-57e0-316d-8693-440c1e282e75","product":{"name":"zebra","vendor":{"name":"ZcashFoundation"}},"product_version":"0 \u003c8.0.0"},{"id":"babb793c-693d-3777-b9d0-a520a05ebf8f","product":{"name":"zebra","vendor":{"name":"ZcashFoundation"}},"product_version":"0 \u003c4.5.0"}],"vulnerabilityVendor":[{"id":"18fecaef-51c9-3f8f-b2fe-c1de54a543b5","vendor":{"name":"ZcashFoundation"}}]}}],"enisaIdAdvisory":[]}