ZF
Vendor
Zfnd
20
CVEs
0
On KEV
0
New 30D
Products
ZE9.1
Zebrad
Zfnd
8 CVEs0 on KEV0 new
ZE7.5
Zebra-chain
Zfnd
3 CVEs0 on KEV0 new
ZE8.1
Zebra
Zfnd
2 CVEs0 on KEV0 new
ZE8.1
Zebra-consensus
Zfnd
2 CVEs0 on KEV0 new
ZE7.5
Zebra-network
Zfnd
2 CVEs0 on KEV0 new
ZE9.1
Zebra-script
Zfnd
2 CVEs0 on KEV0 new
ZE6.5
Zebra-rpc
Zfnd
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-44500 | ZE Zebra-chain Zfnd | 5.3 | May 8 | ZEBRA: Allocation Amplification in Inbound Network Deserializers |
| CVE-2026-44498 | ZE Zebrad Zfnd | 7.5 | May 8 | ZEBRA: Block Validator Undercounts Coinbase and P2SH Sigops |
| CVE-2026-44497 | ZE Zebra-script Zfnd | 9.1 | May 8 | ZEBRA: Consensus Divergence in Transparent Sighash Hash-Type Handling due to Stale Buffer |
| CVE-2026-41585 | ZE Zebra-rpc Zfnd | 6.5 | May 8 | ZEBRA: Denial of Service via Interrupted JSON-RPC Requests from Authenticated Clients |
| CVE-2026-41584 | ZE Zebrad Zfnd | 7.5 | May 8 | ZEBRA: rk Identity Point Panic in Transaction Verification |
| CVE-2026-41583 | ZE Zebrad Zfnd | 9.1 | May 8 | ZEBRA: Consensus Divergence in Transparent Sighash Hash-Type Handling |
| CVE-2026-40881 | ZE Zebra-network Zfnd | 7.5 | Apr 21 | Zebra: addr/addrv2 Deserialization Resource Exhaustion |
| CVE-2026-40880 | ZE Zebra-consensus Zfnd | 8.1 | Apr 21 | Zebra: Cached Mempool Verification Bypasses Consensus Rules for Ahead-of-Tip Blocks |
| CVE-2026-34377 | ZE Zebra Zfnd | 8.1 | Mar 31 | Zebra has a Consensus Failure due to Improper Verification of V5 Transactions |
| CVE-2026-34202 | ZE Zebra Zfnd | 7.5 | Mar 31 | Zebra node crash — V5 transaction hash panic (P2P reachable) |