TI-2026-39342 CVE-2026-54496 · GHSA-ww9q-8r59-xv46
Insufficient verification of data authenticity in ZcashFoundation zebra
Priority MEDIUM 46
ZEBRA is a Zcash node written entirely in Rust.
Zcash
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Zcash records in CISA KEVNo Zcash vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
TI-2019-08706 CVE-2019-11636 · GHSA-p5ww-mxg5-8q8m
Zcash 2.x allows an inexpensive approach to "fill all transactions of all blocks" and…
Priority LOW 37
Zcash 2.x allows an inexpensive approach to "fill all transactions of all blocks" and "prevent any real transaction from occurring" via a "Sapling Wood-Chipper" attack.
TI-2019-05084 CVE-2019-7167 · GHSA-q567-c5xf-8xjf
Zcash, before the Sapling network upgrade (2018-10-28), had a counterfeiting…
Priority LOW 37
Zcash, before the Sapling network upgrade (2018-10-28), had a counterfeiting vulnerability.
TI-2019-12629 CVE-2019-16930 · GHSA-x2rm-rw73-q2w8
Zcashd in Zcash before 2.0.7-3 allows discovery of the IP address of a full node that…
Priority LOW 27
Zcashd in Zcash before 2.0.7-3 allows discovery of the IP address of a full node that owns a shielded address, related to mishandling of exceptions during deserialization of note plaintexts.
TI-2026-27778 CVE-2026-35679 · GHSA-mh64-f367-wjjw
Zcash zcashd before 6.12.0 allows invalid transactions to be accepted under certain…
Priority LOW 16
Zcash zcashd before 6.12.0 allows invalid transactions to be accepted under certain conditions, which potentially could have resulted in the draining of user funds from the Sprout pool.