CVE-2026-104426
MEDIUM
NVD
CVSS Score
5.9
Severity
MEDIUM
Published
Oct 02, 2026
Vendor
unknown
Description
Zebra before 6.1.0 contains an inefficient algorithmic complexity vulnerability in remaining_transaction_value that clones the entire block-level spent-UTXO map per transaction during contextual verification. Attackers can mine or seed the mempool with roughly 26,000 minimal single-input transactions in one block, stalling every validating node for over 52 seconds.