CVE-2026-123554— Zebra zebrad 6.4.0 before 7.0.0 Denial of Service via Mempool Coinbase-Maturity Check

Quick assessment

Affected

ZcashFoundation zebra

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 Zebra 的 zebrad 6.4.0 至 7.0.0 版本之前，内存池（mempool）中的币基（coinbase）成熟度检查会执行二次方级别的工作量。这是因为函数在每次处理被花费的输出点（outpoint）时，都会重新构建交易的输出列表。任何已连接的节点都可以反复发送包含大量透明输入和输出的未签名交易；这些交易会被拒绝，但不会触发“行为不当”（misbehavior）评分机制，从而能够持续占用并阻塞验证线程。

CVSS 7.5 · High Updated Nov 08, 2026

Possible ATT&CK Techniques 2 AI

T1190 · Exploit Public-Facing Application T1499.003 · Application Exhaustion Flood

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Zebra zebrad 6.4.0 before 7.0.0 Denial of Service via Mempool Coinbase-Maturity Check

Source: CVE Program / CVE List V5

Vulnerability Description

Zebra zebrad 6.4.0 before 7.0.0 performs quadratic work in the mempool coinbase-maturity check because Transaction::coinbase_spend_restriction() rebuilds the transaction's output list once per spent outpoint. Any connected peer can repeatedly send unsigned transactions with many transparent inputs and outputs, which are rejected without a misbehavior score, to pin verification threads.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

算法复杂性

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
ZcashFoundation	zebra	6.4.0 ~ 7.0.0	-

II. Public POCs for CVE-2026-123554

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-123554

请登录查看更多情报信息。

Other References for CVE-2026-123554 (3)

https://www.cve.org/CVERecord?id=CVE-2026-123554

Same Patch Batch · ZcashFoundation · 2026-11-08 · 7 CVEs total

CVE-2026-123555	7.5 HIGH	Zebra 2.3.0 before 7.0.0 Denial of Service via Unscored Script Verification Failures
CVE-2026-123558	7.5 HIGH	Zebra before 7.0.0 Checkpoint Sync Denial of Service via Cancelled Verifier Rewind
CVE-2026-123560	7.5 HIGH	Zebra before 7.0.0 Sync Denial of Service via Forged Checkpoint Block Body
CVE-2026-123559	7.5 HIGH	Zebra before 7.0.0 Denial of Service via Quadratic Sighash Computation
CVE-2026-123557	5.9 MEDIUM	Zebra zebrad before 7.0.0 Reachable Assertion DoS via Peer Disconnection
CVE-2026-123556	5.3 MEDIUM	Zebra 4.5.0 before 7.0.0 Honest Peer Ban via Mempool Lock-Time Scoring

IV. Related Vulnerabilities

Same product: zebra

Same vendor: ZcashFoundation

Same weakness: CWE-407