Login Request a demo
ZE
Product
zebra
by ZcashFoundation · last CVE Oct 12, 2026
42
CVEs
0
On KEV
9.3
Max CVSS
22
New 30D
Vulnerabilities42In the news0Timeline
Severity mix
Critical 4High 14Medium 20Low 4
Severity
All severities42Critical4High14Medium20Low4
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add zebra to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-52736
8.7
1%
Aug 18
ZEBRA: Block suppression via NU5 same-header body poisoning of sent-hash cache
Affected: < 4.5.0
CVE-2026-44499
8.7
0%
May 8
ZEBRA: Permanent Block Discovery Halt via Gossip Queue Saturation and Syncer Poisoning
Affected: < 4.4.0
CVE-2026-34377
8.1
0%
Mar 31
Zebra has a Consensus Failure due to Improper Verification of V5 Transactions
Affected: < 4.3.0
CVE-2026-109363
7.5
0%
Oct 12
Zebra 6.4.0 before 6.4.2 Denial of Service via Malformed v6 Transaction
Affected: 6.4.0 before 6.4.2
CVE-2026-104431
7.5
0%
Oct 2
Zebra before 6.0.0 Denial of Service via Synchronous Script FFI Verification
Affected: before 6.0.0
CVE-2026-104430
7.5
0%
Oct 2
Zebra 4.5.0 Consensus Split via P2SH Sigop Overcount
Affected: 4.5.0 before 4.5.1; 7.0.0 before 7.0.1
CVE-2026-104423
7.5
0%
Oct 2
Zebra before 6.2.1 Denial of Service via Uncapped V6 Shielded Proof Verification
Affected: before 6.2.1
CVE-2026-104422
7.5
0%
Oct 2
Zebra before 6.3.0 Block Sync Denial of Service via Coinbase scriptSig Rewrite
Affected: before 6.3.0
CVE-2026-52829
7.5
1%
Aug 18
ZEBRA: IPv4-Mapped Mempool Misbehavior Update Aborts Zebra Address Book
Affected: < 4.5.0
CVE-2026-44498
7.5
0%
May 8
ZEBRA: Block Validator Undercounts Coinbase and P2SH Sigops
Affected: < 4.4.0
CVE-2026-41584
7.5
0%
May 8
ZEBRA: rk Identity Point Panic in Transaction Verification
Affected: zebra-chain < 6.0.2; zebrad < 4.3.1
CVE-2026-34202
7.5
1%
Mar 31
Zebra node crash — V5 transaction hash panic (P2P reachable)
Affected: < 4.3.0
CVE-2026-104437
7.4
0%
Oct 2
Zebra before 4.4.0 Consensus Split via SIGHASH_SINGLE Missing-Output Handling
Affected: before 4.4.0
CVE-2026-104435
7.4
0%
Oct 2
Zebra 4.4.0 Consensus Divergence via V5 SIGHASH_SINGLE Without Output
Affected: 4.4.0 before 4.4.1; 6.0.0 before 6.0.1
Showing 14