CyberSecBulletin

UltraDAGcom vulnerabilities

We track 2 vulnerabilities in UltraDAGcom products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 8, 2026.

2vulnerabilities
0critical
2high
0exploited
8.5average CVSS score

Latest UltraDAGcom vulnerabilities

  • 8.8 High severity

    core: Improper Access Control

    CVE-2026-42278UltraDAGcom

    UltraDAG is a minimal DAG-BFT blockchain in Rust. Prior to commit fb6ef59, the UltraDAG StateEngine implementation of SmartTransferTx contains a critical logic flaw in its policy enforcement pipeline. When a transaction originates from a "Pocket" (a derived su

  • 8.2 High severity

    core: Improper Cleanup on Thrown Exception

    CVE-2026-40583UltraDAGcom

    UltraDAG is a minimal DAG-BFT blockchain in Rust. In version 0.1, a non-council attacker can submit a signed SmartOp::Vote transaction that passes signature, nonce, and balance prechecks, but fails authorization only after state mutation has already occurred.