Auth bypass in Ultradagcom Core

CVE-2026-42278

UltraDAG is a minimal DAG-BFT blockchain in Rust. Prior to commit fb6ef59, the UltraDAG StateEngine implementation of SmartTransferTx contains a critical logic flaw in its policy enforcement pipeline. When a transaction originates from a "…

EPSS: 0.000 (4.5th percentile) — read the EPSS interpretation.