CVE-2026-104424
LOW
NVD
CVSS Score
3.7
Severity
LOW
Published
Oct 02, 2026
Vendor
unknown
Description
Zebra before 6.1.0 contains an incorrect calculation vulnerability in its ZIP-317 block template selector that omits header and transaction-count size from the block budget. Attackers can place valid selectable transactions in a victim miner's mempool to shape templates into oversized blocks, causing rejection and wasted proof-of-work.