{"metadata": {"vulnerability": "cve-2026-109366", "count": 11, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 6}}, "data": [{"timestamp": "2026-09-28T00:00:00Z", "date_only": false, "value": "2026-09-28T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "cve-2026-109366", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-12T14:21:32.595Z", "date_only": false, "value": "2026-10-12T14:21:32.595Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-109366", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-12T16:05:43.620Z", "date_only": false, "value": "2026-10-12T16:05:43.620Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-109366", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-12T16:05:43.620Z", "date_only": false, "value": "2026-10-12T16:05:43.620Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-109366", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-12T16:05:43.620Z", "date_only": false, "value": "2026-10-12T16:05:43.620Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "cve-2026-109366", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-12T17:17:34Z", "date_only": false, "value": "2026-10-12T17:17:34Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-MPRQ-2CJH-7QC2", "record": "GHSA-MPRQ-2CJH-7QC2", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-12T17:17:34.393Z", "date_only": false, "value": "2026-10-12T17:17:34.393", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109366", "record": "FKIE_CVE-2026-109366", "field": "published"}, {"timestamp": "2026-10-12T17:53:36.578Z", "date_only": false, "value": "2026-10-12T17:53:36.578104Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117429214649304961", "record": "CVE-2026-109366", "field": "creation_timestamp", "uuid": "946306e0-42b7-4e46-af8f-285c72374a2a", "content": "CVE-2026-109366 Zebra before 6.4.0 Gossiped Block Drop via Forged Coinbase scriptSig Height Zebra before 6.4.0 contains an improper integrity validation vulnerability in the inbound gossip download path that allows unauthenticated peers to force dropping of new blocks without penalty. Attackers can serve a real block with a coinbase scriptSig rewritten to height 1, which keeps the ZIP-244 block hash, triggering a behind-tip drop before consensus validation and delaying tip discovery for mining backends.\nhttps://www.cve.org/CVERecord?id=CVE-2026-109366https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-4f6v-mj46-gxg3https://www.vulncheck.com/advisories/zebra-before-6.4.0-gossiped-block-drop-via-forged-coinbase-scriptsig-height#ZcashFoundation #zebra#CVE_2026_109366#bot", "url": "https://infosec.exchange/users/cve/statuses/117429214649304961"}, {"timestamp": "2026-10-12T18:31:54Z", "date_only": false, "value": "2026-10-12T18:31:54Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-MPRQ-2CJH-7QC2", "record": "GHSA-MPRQ-2CJH-7QC2", "field": "published"}, {"timestamp": "2026-10-12T18:31:54Z", "date_only": false, "value": "2026-10-12T18:31:54Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-MPRQ-2CJH-7QC2", "record": "GHSA-MPRQ-2CJH-7QC2", "field": "modified"}, {"timestamp": "2026-10-16T19:18:44.867Z", "date_only": false, "value": "2026-10-16T19:18:44.867", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109366", "record": "FKIE_CVE-2026-109366", "field": "lastModified"}]}