Product by Zcashfoundation

    Zebra

    42 known vulnerabilities in Zebra (Zcashfoundation), 0 of them actively exploited (CISA KEV).

    Key figures

    42

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    7

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Zebra (Zcashfoundation)
    CriticalCVE-2026-34202

    Zebra node crash — V5 transaction hash panic (P2P reachable)

    also in 1 other product

    		7.5
    HighCVE-2026-52736

    ZEBRA: Block suppression via NU5 same-header body poisoning of sent-hash cache

    		—
    CriticalCVE-2026-52735

    ZEBRA: Consensus divergence via P2SH sigop undercount in pure-Rust disabled-opcode parser

    		—
    HighCVE-2026-109363

    Zebra 6.4.0 before 6.4.2 Denial of Service via Malformed v6 Transaction

    		7.5
    HighCVE-2026-104430

    Zebra 4.5.0 Consensus Split via P2SH Sigop Overcount

    		7.5
    HighCVE-2026-52829

    ZEBRA: IPv4-Mapped Mempool Misbehavior Update Aborts Zebra Address Book

    		7.5
    HighCVE-2026-104431

    Zebra before 6.0.0 Denial of Service via Synchronous Script FFI Verification

    		7.5
    HighCVE-2026-104423

    Zebra before 6.2.1 Denial of Service via Uncapped V6 Shielded Proof Verification

    		7.5
    HighCVE-2026-104426

    Zebra before 6.1.0 Quadratic Complexity DoS via Block Transparent Value Check

    		5.9
    HighCVE-2026-104427

    Zebra before 6.1.0 Chain Stall via Stale parent_error_map Entry

    		5.9
    HighCVE-2026-104422

    Zebra before 6.3.0 Block Sync Denial of Service via Coinbase scriptSig Rewrite

    		7.5
    HighCVE-2026-104437

    Zebra before 4.4.0 Consensus Split via SIGHASH_SINGLE Missing-Output Handling

    		7.4
    MediumCVE-2026-104428

    Zebra before 11.0.0 Denial of Service via getblock Verbosity 2

    		5.3
    MediumCVE-2026-52738

    ZEBRA: Finalized address balance credit-first overflow on consensus-valid blocks

    also in 1 other product

    		—
    HighCVE-2026-104435

    Zebra 4.4.0 Consensus Divergence via V5 SIGHASH_SINGLE Without Output

    		7.4
    CriticalCVE-2026-54496

    ZcashFoundation Zebra: Insufficient Verification of Data Authenticity

    		9.3
    MediumCVE-2026-52731

    ZEBRA: Full node denial of service via non-ASCII LongPollId in getblocktemplate

    		6.5
    HighCVE-2026-104434

    Zebra before 8.0.0 Denial of Service via z_listunifiedreceivers RPC

    		6.5
    MediumCVE-2026-104432

    Zebra before 6.3.0 False Readiness via Discarded One-Hash FindBlocks Response

    		5.3
    MediumCVE-2026-104429

    Zebra before 6.0.0-rc.0 Per-Peer Mempool Admission Bypass via P2P tx Messages

    		5.3
    MediumCVE-2026-104425

    Zebra before 6.1.0 Batch-Verification Poisoning DoS via Unattributed Pushed Transactions

    		5.3
    MediumCVE-2026-104421

    Zebra before 6.2.1 Block Download Denial of Service via KnownBlock SentHashes Lockout

    		5.3
    MediumCVE-2026-104420

    Zebra before 6.3.0 Peer Misbehavior Ban Bypass via Gossiped Blocks

    		5.3
    MediumCVE-2026-52739

    ZEBRA: Repeated Non-Finalized Shielded Transaction Aborts Zebra Before Duplicate-Nullifier Rejection

    also in 1 other product

    		5.9
    MediumCVE-2026-52733

    ZEBRA: Persistent on-disk corruption of Sapling/Orchard subtree roots after chain fork via pop_tip

    also in 1 other product

    		6.5

    All vulnerabilities in search

    All products by Zcashfoundation