CVE-2026-40583
High · 8.2CVSS
8.2
EPSS
0.6%
Published
Apr 21, 2026
CISA due date
—
The record
UltraDAG is a minimal DAG-BFT blockchain in Rust. In version 0.1, a non-council attacker can submit a signed SmartOp::Vote transaction that passes signature, nonce, and balance prechecks, but fails authorization only after state mutation has already occurred.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-112326 GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before… CWE-460
- CVE-2026-48524 PyJWT is a JSON Web Token implementation in Python. CWE-460
- CVE-2026-33481 Syft is a a CLI tool and Go library for generating a Software Bill of Materials (SBOM)… CWE-460
- CVE-2026-20118 A vulnerability in the handling of an Egress Packet Network Interface (EPNI) Aligner… CWE-460
- CVE-2025-69652 GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT)… CWE-460
- CVE-2025-31650 Apache Tomcat Denial of Service via invalid HTTP priority header CWE-460
- CVE-2026-59305 Partition interceptor may be improperly added while sending message. CWE-696
- CVE-2026-68930 Russh is a Rust SSH client & server library. CWE-696