CVE-2026-104429
MEDIUM
NVD
CVSS Score
5.3
Severity
MEDIUM
Published
Oct 02, 2026
Vendor
unknown
Description
Zebra (zebrad) 5.0.0 before 6.0.0-rc.0 does not apply its per-peer mempool admission cap to transactions received as direct P2P tx messages, because these are queued without the sending peer recorded as their source. A remote inbound peer can push many unique transactions to occupy a disproportionate share of mempool admission slots, crowding out honest peers' transaction relay.