ZcashFoundation vulnerabilities

CVEs per yearBy the year they were published

1. 20251
2. 202644

Newest CVEs

• CVE-2026-109366

  Zebra before 6.4.0 Gossiped Block Drop via Forged Coinbase scriptSig Height

  ZcashFoundation · zebra

  Medium6.3
• CVE-2026-109365

  Zebra before 6.4.0 Denial of Service via Same-Hash Forged Block Bodies

  ZcashFoundation · zebra

  Medium6.3
• CVE-2026-109364

  Zebra 2.3.0 before 6.4.0 Peer Ban Bypass via Exact-IP Keying

  ZcashFoundation · zebra

  Medium6.9
• CVE-2026-109363

  Zebra 6.4.0 before 6.4.2 Denial of Service via Malformed v6 Transaction

  ZcashFoundation · zebra

  High8.7
• CVE-2026-104437

  Zebra before 4.4.0 Consensus Split via SIGHASH_SINGLE Missing-Output Handling

  ZcashFoundation · zebra

  High8.3
• CVE-2026-104436

  Zebra before 4.5.0 CPU Amplification via Uncapped getblocks/getheaders Locator Length

  ZcashFoundation · zebra

  Medium6.3
• CVE-2026-104435

  Zebra 4.4.0 Consensus Divergence via V5 SIGHASH_SINGLE Without Output

  ZcashFoundation · zebra

  High8.3
• CVE-2026-104434

  Zebra before 8.0.0 Denial of Service via z_listunifiedreceivers RPC

  ZcashFoundation · zebra

  High7.1
• CVE-2026-104432

  Zebra before 6.3.0 False Readiness via Discarded One-Hash FindBlocks Response

  ZcashFoundation · zebra

  Medium6.9
• CVE-2026-104431

  Zebra before 6.0.0 Denial of Service via Synchronous Script FFI Verification

  ZcashFoundation · zebra

  High8.7