CVE-2026-123554 | ZcashFoundation Zebra up to 6.x Mempool coinbase_spend_restriction resource consumption

November 8, 2026 Yanac

A vulnerability classified as problematic was found in ZcashFoundation Zebra up to 6.x. This affects the function Transaction::coinbase_spend_restriction of the component Mempool. The manipulation results in resource consumption.

This vulnerability is identified as CVE-2026-123554. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More