Auth bypass in Ultradagcom Core

CVE-2026-42278

UltraDAG is a minimal DAG-BFT blockchain in Rust. Prior to commit fb6ef59, the UltraDAG StateEngine implementation of SmartTransferTx contains a critical logic flaw in its policy enforcement pipeline. When a transaction originates from a "…

EPSS: 0.004 (29.7th percentile) — read the EPSS interpretation.