MEDIUM 6.9 NVD
CVE-2026-104432
Zebra before 6.3.0 contains an improper exceptional condition check in ChainSync::obtain_tips that discards valid one-hash FindBlocks responses, falsely reporti
Zebra before 6.3.0 contains an improper exceptional condition check in ChainSync::obtain_tips that discards valid one-hash FindBlocks responses, falsely reporting close-to-tip status. Peers returning only the next block hash cause a zero-length sync sample, making the /ready endpoint return 200 OK while the node remains behind the tip.
References
- https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-h8m8-844p-v3m9
- https://www.vulncheck.com/advisories/zebra-before-6.3.0-false-readiness-via-discarded-one-
This medium severity vulnerability with a CVSS score of 6.9 was published on 2026-10-02 via NVD.
vulnfeed aggregates 10476 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.