Is CVE-2026-104424 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-104424?

CVE-2026-104424 has a CVSS v3 severity of LOW (3.7).

Back

CVE-2026-104424

Description

Zebra before 6.1.0 contains an incorrect calculation vulnerability in its ZIP-317 block template selector that omits header and transaction-count size from the block budget. Attackers can place valid selectable transactions in a victim miner's mempool to shape templates into oversized blocks, causing rejection and wasted proof-of-work.