low3.7
CVE-2026-104424
Zebra before 6.1.0 contains an incorrect calculation vulnerability in its ZIP-317 block template selector that omits header and transaction-count size from the…
Impact
Zebra before 6.1.0 contains an incorrect calculation vulnerability in its ZIP-317 block template selector that omits header and transaction-count size from the block budget. Attackers can place valid selectable transactions in a victim miner's mempool to shape templates into oversized blocks, causing rejection and wasted proof-of-work.
Affected products
| Product | Affected versions |
|---|---|
| Zebra | before 6.1.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.