ZcashFoundation Vulnerabilities and Affected Products
Vulnerabilities associated with zebrad.
Products
Clear product- zebra10 vulnerabilities
- zebra-consensus2 vulnerabilities
- zebrad2 vulnerabilities
- frost1 vulnerability
- zebra-chain1 vulnerability
- zebra-network1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-40881MEDIUM | Zebra: addr/addrv2 Deserialization Resource ExhaustionZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.3.0 and zebra-network version 5.0.1, when deserializing addr or addrv2 messages, which contain vectors of addresses, Zebra would fully deserialize them up to a maximum length (over 233,000) that was derived from the 2 MiB message size limit. This is much larger than the actual limit of 1,000 messages from the specification. Zebra would eventually check that limit but, at that point, the memory for the larger vector was alr… CWE-770Apr 21, 2026 | CVSS6.3v4.0 | EPSS0.263% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-40880HIGH | Zebra: Cached Mempool Verification Bypasses Consensus Rules for Ahead-of-Tip BlocksZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.3.1 and zebra-consensus version 5.0.2, a logic error in Zebra's transaction verification cache could allow a malicious miner to induce a consensus split. By carefully submitting a transaction that is valid for height H+1 but invalid for H+2 and then mining that transaction in a block at height H+2, a miner could cause vulnerable Zebra nodes to accept an invalid block, leading to a consensus split from the rest of the Zcash… CWE-1025Apr 21, 2026 | CVSS7.2v4.0 | EPSS0.261% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |