medium5.3
CVE-2026-109364
Zebra 2.3.0 before 6.4.0 contains a protection mechanism failure that allows unauthenticated peers to evade bans because bans and misbehavior scores are keyed …
Impact
Zebra 2.3.0 before 6.4.0 contains a protection mechanism failure that allows unauthenticated peers to evade bans because bans and misbehavior scores are keyed on exact IP addresses. Attackers can reconnect from fresh IPv6 addresses in their /64 allocation or flush the 20,000-entry FIFO ban list to restore access for banned peers.
Affected products
| Product | Affected versions |
|---|---|
| Zebra 2.3.0 | before 6.4.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.