CVE-2026-123555
Deferred Deferred - Pending Action

Zebra Peer DoS via Invalid Transparent Scripts

Publication date: 2026-11-08

Last updated on: 2026-11-08

Assigner: VulnCheck

Description
Zebra from 2.3.0 before 7.0.0 contains a denial of service vulnerability that allows unauthenticated peers to evade misbehavior scoring by sending transactions or blocks with invalid transparent scripts. Attackers can flood mempool with script-failing transactions or serve forged v5 block bodies with altered scriptSig bytes to exhaust CPU and repeatedly stall block sync.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-08
Last Modified
2026-11-08
Generated
2026-11-08
AI Q&A
2026-11-08
EPSS Evaluated
N/A
NVD
CVE-2026-123555
EUVD
EUVD-2026-119440

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
zebra zebra From 2.3.0 (inc) to 7.0.0 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-755 The product does not handle or incorrectly handles an exceptional condition.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

Zebra versions from 2.3.0 to 7.0.0 have a denial of service vulnerability. Unauthenticated peers can bypass misbehavior scoring by sending transactions or blocks with invalid transparent scripts. Attackers exploit this by flooding the mempool with failing transactions or sending forged blocks to exhaust CPU resources and stall block synchronization.

Impact Analysis

This vulnerability can cause network slowdowns or complete halts by consuming excessive CPU resources. It may disrupt blockchain operations, delay transaction processing, and reduce overall system reliability for users and services relying on Zebra.

Mitigation Strategies

Upgrade Zebra to version 7.0.0 or later to address the denial of service vulnerability. Monitor network traffic for unusual transaction or block activity with invalid transparent scripts.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-123555. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...