Vulnerabilities in ZcashFoundation

52 results
CVE-2026-34202CRITICALZebra node crash — V5 transaction hash panic (P2P reachable)EPSS 0.8%CVE-2026-52736HIGHZEBRA: Block suppression via NU5 same-header body poisoning of sent-hash cacheEPSS 0.6%CVE-2026-52829HIGHZEBRA: IPv4-Mapped Mempool Misbehavior Update Aborts Zebra Address BookEPSS 0.6%CVE-2026-52731MEDIUMZEBRA: Full node denial of service via non-ASCII LongPollId in getblocktemplateEPSS 0.5%CVE-2026-52739MEDIUMZEBRA: Repeated Non-Finalized Shielded Transaction Aborts Zebra Before Duplicate-Nullifier RejectionEPSS 0.5%CVE-2026-52732MEDIUMZEBRA: Mempool transaction admission denial via single-peer inbound queue saturationEPSS 0.5%CVE-2026-52738MEDIUMZEBRA: Finalized address balance credit-first overflow on consensus-valid blocksEPSS 0.5%CVE-2026-52734MEDIUMZEBRA: Unbounded memory leak in mempool download pipeline via timeout path cancel_handles retentionEPSS 0.5%CVE-2026-52735CRITICALZEBRA: Consensus divergence via P2SH sigop undercount in pure-Rust disabled-opcode parserEPSS 0.5%CVE-2026-52733MEDIUMZEBRA: Persistent on-disk corruption of Sapling/Orchard subtree roots after chain fork via pop_tipEPSS 0.4%CVE-2026-109363HIGHZebra 6.4.0 before 6.4.2 Denial of Service via Malformed v6 TransactionEPSS 0.4%CVE-2026-123554HIGHZebra zebrad 6.4.0 before 7.0.0 Denial of Service via Mempool Coinbase-Maturity CheckEPSS 0.4%CVE-2026-123555HIGHZebra 2.3.0 before 7.0.0 Denial of Service via Unscored Script Verification FailuresEPSS 0.4%CVE-2026-104430HIGHZebra 4.5.0 Consensus Split via P2SH Sigop OvercountEPSS 0.4%CVE-2026-104428MEDIUMZebra before 11.0.0 Denial of Service via getblock Verbosity 2EPSS 0.4%CVE-2026-44500MEDIUMZEBRA: Allocation Amplification in Inbound Network DeserializersEPSS 0.4%CVE-2026-44499HIGHZEBRA: Permanent Block Discovery Halt via Gossip Queue Saturation and Syncer PoisoningEPSS 0.4%CVE-2026-123560HIGHZebra before 7.0.0 Sync Denial of Service via Forged Checkpoint Block BodyEPSS 0.3%CVE-2026-104423HIGHZebra before 6.2.1 Denial of Service via Uncapped V6 Shielded Proof VerificationEPSS 0.3%CVE-2026-123559HIGHZebra before 7.0.0 Denial of Service via Quadratic Sighash ComputationEPSS 0.3%