CWE-405 (CWE-405) — 5 disclosed vulnerabilities

Records the NVD classes under CWE-405, highest CVSS first.

HIGH 7.5CVE-2026-104431public PoC2026-10-02
Zebra before 6.0.0 contains a denial of service vulnerability that allows unauthenticated peers to stall Tokio workers by submitting mempool transactions requiring expensive synchronous script verification. Attackers can send non-standard high-sigop P2SH trans…
AI risk analysis on Exploit-DB.ai →
HIGH 7.5CVE-2026-104423public PoC2026-10-02
Zebra (zebrad) before 6.2.1 contains an asymmetric resource consumption vulnerability that allows unauthenticated peers to stall block verification by pushing V6 mempool transactions with invalid Halo2 proofs. Attackers can flood the shared unprioritized Halo2…
AI risk analysis on Exploit-DB.ai →
MEDIUM 5.3CVE-2026-104425public PoC2026-10-02
ZcashFoundation Zebra before 6.1.0 contains a resource exhaustion vulnerability that allows unauthenticated peers to degrade block processing by pushing transactions with invalid Orchard proofs without being misbehavior-scored. Attackers can repeatedly push in…
AI risk analysis on Exploit-DB.ai →
MEDIUM 5.3CVE-2026-750292026-09-16
In a query response, an attacker may send `named` multiple copies of a record that should only exist once (such as an SOA record). If the RDATA is the same on all the copies, the record is appended to the in-memory RDATA set, which can cause increased memory u…
AI risk analysis on Exploit-DB.ai →
UNSCOREDCVE-2026-1038802026-10-02
Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. Storing a password using the bcrypt algorithm with a high force like 30 in a LDAP server that supports this algorithm will cause the server CPU to run for hours checking the creden…
AI risk analysis on Exploit-DB.ai →