CVE-2026-123560
Deferred Deferred - Pending Action

Zebra before 7.0.0 Incomplete Cleanup Flaw Enables Sync Stalling

Publication date: 2026-11-08

Last updated on: 2026-11-08

Assigner: VulnCheck

Description
Zebra before 7.0.0 contains an incomplete cleanup vulnerability that allows unauthenticated peers to stall initial sync by serving a forged checkpoint block body. Attackers can supply a body with forged authorizing data near the final checkpoint, leaving rejected hashes in the sent-hash set so the node stops requesting blocks until restart.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-08
Last Modified
2026-11-08
Generated
2026-11-08
AI Q&A
2026-11-08
EPSS Evaluated
N/A
NVD
CVE-2026-123560
EUVD
EUVD-2026-119445

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-459 The product does not properly "clean up" and remove temporary or supporting resources after they have been used.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-123560 is a vulnerability in Zebra node software versions before 7.0.0 where unauthenticated peers can stall the initial sync process by sending a forged checkpoint block body with incorrect authorizing data. The node records the hash as present before verifying the authorizing data, causing it to stop requesting missing blocks until restarted.

Detection Guidance

Monitor Zebra node logs for stalled sync processes near final checkpoints. Check for repeated failed block requests or peers serving inconsistent checkpoint data. Restarting the node will clear the stale state if sync is stalled.

Impact Analysis

This vulnerability can cause a denial of service by stalling the node's sync process, preventing it from downloading and verifying new blocks. The node will stop requesting blocks until restarted, disrupting network participation and operations.

Mitigation Strategies

Upgrade Zebra to version 7.0.0 or later. If immediate upgrade is not possible, restart the node to clear the stale state causing the sync stall. Ensure peers are trusted to prevent forged checkpoint attacks.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-123560. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...