CVE-2026-104425
MEDIUM
NVD
CVSS Score
5.3
Severity
MEDIUM
Published
Oct 02, 2026
Vendor
unknown
Description
ZcashFoundation Zebra before 6.1.0 contains a resource exhaustion vulnerability that allows unauthenticated peers to degrade block processing by pushing transactions with invalid Orchard proofs without being misbehavior-scored. Attackers can repeatedly push invalid proofs into the shared halo2 batch verifier, forcing honest block proofs onto the slow individual-verification path and slowing block processing roughly sevenfold.