{"id":"EUVD-2026-91446","enisaUuid":"2d2d2680-bee5-3293-b0f3-19ade3202e53","description":"Zebra before 4.5.0 contains an uncontrolled resource consumption vulnerability that allows remote P2P peers to exhaust blocking-pool threads by sending oversized block locator vectors. Attackers can send getblocks or getheaders messages with up to 65,535 locator hashes, triggering per-hash chain lookups that degrade block validation, RPC, and mempool performance.","datePublished":"Oct 2, 2026, 11:38:13 AM","dateUpdated":"Oct 29, 2026, 9:15:28 PM","baseScore":6.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","references":"https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-443g-gwgp-49x4\nhttps://www.vulncheck.com/advisories/zebra-before-4.5.0-cpu-amplification-via-uncapped-getblocks-getheaders-locator-length\n","aliases":"CVE-2026-104436\nGHSA-4m38-rccq-j8gv\n","assigner":"VulnCheck","epss":0.27,"enisaIdProduct":[{"id":"46c10cb2-d3cb-38f5-bcd8-0891f80b61e5","product":{"name":"zebra","vendor":{"name":"ZcashFoundation"}},"product_version":"0 \u003c4.5.0"},{"id":"fe3e7163-4057-3732-b62e-42cc44687c46","product":{"name":"zebra-chain","vendor":{"name":"ZcashFoundation"}},"product_version":"0 \u003c8.0.0"}],"enisaIdVendor":[{"id":"3253bccc-159c-340e-b2c7-b923c0ff17f7","vendor":{"name":"ZcashFoundation"}}],"enisaIdVulnerability":[{"id":"3041c72c-e3db-3d3a-94f1-c8bce17dc758","vulnerability":{"id":"GHSA-4m38-rccq-j8gv","description":"Zebra before 4.5.0 contains an uncontrolled resource consumption vulnerability that allows remote P2P peers to exhaust blocking-pool threads by sending oversized block locator vectors. Attackers can send getblocks or getheaders messages with up to 65,535 locator hashes, triggering per-hash chain lookups that degrade block validation, RPC, and mempool performance.","datePublished":"Oct 2, 2026, 12:31:15 PM","dateUpdated":"Oct 2, 2026, 12:31:15 PM","baseScore":0.0,"references":"https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-443g-gwgp-49x4\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-104436\nhttps://www.vulncheck.com/advisories/zebra-before-4.5.0-cpu-amplification-via-uncapped-getblocks-getheaders-locator-length\n","enisa_id":"EUVD-2026-91446\n","aliases":"CVE-2026-104436\nGHSA-4m38-rccq-j8gv\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:07:07 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"92c13af9-3bdd-3b15-b3de-4ac73e9ba2ec","vulnerability":{"id":"CVE-2026-104436","description":"Zebra before 4.5.0 contains an uncontrolled resource consumption vulnerability that allows remote P2P peers to exhaust blocking-pool threads by sending oversized block locator vectors. Attackers can send getblocks or getheaders messages with up to 65,535 locator hashes, triggering per-hash chain lookups that degrade block validation, RPC, and mempool performance.","datePublished":"Oct 2, 2026, 11:38:13 AM","dateUpdated":"Oct 29, 2026, 9:15:28 PM","status":"PUBLISHED","baseScore":6.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","references":"https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-443g-gwgp-49x4\nhttps://www.vulncheck.com/advisories/zebra-before-4.5.0-cpu-amplification-via-uncapped-getblocks-getheaders-locator-length\n","enisa_id":"EUVD-2026-91446\n","assigner":"VulnCheck","epss":0.27,"dataProcessed":"Nov 4, 2026, 7:15:26 AM","vulnerabilityProduct":[{"id":"babb793c-693d-3777-b9d0-a520a05ebf8f","product":{"name":"zebra","vendor":{"name":"ZcashFoundation"}},"product_version":"0 \u003c4.5.0"},{"id":"bf80bb0a-06bf-35cf-b1af-2d61816d794f","product":{"name":"zebra-chain","vendor":{"name":"ZcashFoundation"}},"product_version":"0 \u003c8.0.0"}],"vulnerabilityVendor":[{"id":"18fecaef-51c9-3f8f-b2fe-c1de54a543b5","vendor":{"name":"ZcashFoundation"}}]}}],"enisaIdAdvisory":[]}