CVE-2026-34069Disclosure(nimiq / nimiq_proof-of-stake)

LOWCVSS 5.3 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. In versions 1.2.2 and below, an unauthenticated p2p peer can cause the RequestMacroChain message handler task to panic. Sending a RequestMacroChain message where the first locator hash on the victim’s main chain is a micro block hash (not a macro block hash) causes said panic. The RequestMacroChain::handle handler selects the locator based only on "is on main chain", then calls get_macro_blocks() and panics via .unwrap() when the selected hash is not a macro block (BlockchainError::BlockIsNotMacro). This issue has been fixed in version 1.3.0.

nimiq CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Patch / fix

Other references

https://github.com/nimiq/core-rs-albatross/releases/tag/v1.3.0

Weakness type (CWE)

CWE-617

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

nimiq_proof-of-stake

Threat summary

4 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
General: 2 classified signals
Peaked 1d ago at 3 mentions (2026-04-14); latest day: 1
4 total mentions across 2 days

Affected systems

Vendors

nimiq

Products

nimiq_proof-of-stake

Deep dive

Activity timeline4 mentions / 2d

Signal classification2 categories

Disclosure

250.0%

General

250.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-04-14	3	Disclosure1General2
2026-04-28	1	Disclosure1

Full discourse4 posts

cvereports@_cvereports163d
Disclosure
CVE-2026-34069: CVE-2026-34069: Remote Denial of Service via Reachable Assertion in Nimiq Albatross Consensus The Nimiq Albatross consensus implementation suffers from a remote Denial of Service (DoS) vulnerability. An unauthenticated peer can trigger... https://cvereports.com/reports/CVE-2026-34069
Post summary
The post announces a remote DoS vulnerability in the Nimiq Albatross consensus via a reachable assertion, but provides no PoC, exploit, exploitation evidence, or mitigation details.
0000048
36 followersView on X
CVEarity@CVEarity177d
General
⚡ New CVE Alert: CVE-2026-34069 📊 Severity: 5.3 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-34069 #CVE-2026-34069 #CVE #Medium #CyberSecurity #InfoSec https://t.co/e0iG2FyOlM
Post summary
The tweet merely announces CVE‑2026‑34069 with basic severity info and a link to NVD, without further technical, exploit, or mitigation details.
0000026
137 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds177d
General
CVE-2026-34069 Denial of Service via RequestMacroChain Message Handler Panic in Nimiq Core-rs-albatross 1.2.2 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-34069
Post summary
The entry is a concise disclosure of CVE‑2026‑34069, noting a denial‑of‑service flaw in Nimiq Core‑rs‑albatross 1.2.2, but lacks any PoC, exploit code, active exploitation evidence, or patch information.
0000049
4.0K followersView on X
CVE@CVEnew177d
Disclosure
CVE-2026-34069 nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. In versions 1.2.2 and below, an unau… https://www.cve.org/CVERecord?id=CVE-2026-34069
Post summary
The tweet references the CVE‑2026‑34069 entry for nimiq/core-rs-albatross and links to the CVE record, but provides no further exploitation or remedy details.
00000100
57.2K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	nimiq	nimiq_proof-of-stake	-	rust	-

Explore more

Back to dashboard nimiq CVEs nimiq_proof-of-stake vulnerabilities

What researchers are saying

CVE-2026-34069

cvereports@_cvereportsDisclosure

The post announces a remote DoS vulnerability in the Nimiq Albatross consensus via a reachable assertion, but provides no PoC, exploit, exploitation evidence, or mitigation details.

CVEarity@CVEarityGeneral

The tweet merely announces CVE‑2026‑34069 with basic severity info and a link to NVD, without further technical, exploit, or mitigation details.

Vulmon Vulnerability Feed@VulmonFeedsGeneral

The entry is a concise disclosure of CVE‑2026‑34069, noting a denial‑of‑service flaw in Nimiq Core‑rs‑albatross 1.2.2, but lacks any PoC, exploit code, active exploitation evidence, or patch information.

CVE@CVEnewDisclosure

The tweet references the CVE‑2026‑34069 entry for nimiq/core-rs-albatross and links to the CVE record, but provides no further exploitation or remedy details.