Z
Vendor security profile
ZcashFoundation
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs32
Critical1
CISA KEV0
Public exploit2
Patch rate%3
Avg. CVSS7.2
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
10
0
22
CVE KEV
CVE severity distribution
32toplam CVE
Critical1 (3%)
High12 (38%)
Medium19 (59%)
Patch and exploitation view
%3
Verified patch
%0
CISA KEV
%6
Public exploit
1Patch available
0Partial
0Workaround
0Vendor: no patch
31Unknown
Latest vulnerabilities
6.3
CVE-2026-109366
Zebra before 6.4.0 Gossiped Block Drop via Forged Coinbase scriptSig Height
Z
Patch status unknownEPSS %0
6.3
CVE-2026-109365
Zebra before 6.4.0 Denial of Service via Same-Hash Forged Block Bodies
Z
Patch status unknownEPSS %0
6.9
CVE-2026-109364
Zebra 2.3.0 before 6.4.0 Peer Ban Bypass via Exact-IP Keying
Z
Patch status unknownEPSS %0
8.7
CVE-2026-109363
Zebra 6.4.0 before 6.4.2 Denial of Service via Malformed v6 Transaction
Z
Patch verifiedEPSS %0
8.3
CVE-2026-104437
Zebra before 4.4.0 Consensus Split via SIGHASH_SINGLE Missing-Output Handling
Z
Patch status unknownEPSS %0
6.3
CVE-2026-104436
Zebra before 4.5.0 CPU Amplification via Uncapped getblocks/getheaders Locator Length
Z
Patch status unknownEPSS %0
8.3
CVE-2026-104435
Zebra 4.4.0 Consensus Divergence via V5 SIGHASH_SINGLE Without Output
Z
Patch status unknownEPSS %0
7.1
CVE-2026-104434
Zebra before 8.0.0 Denial of Service via z_listunifiedreceivers RPC
Z
Patch status unknownEPSS %0
6.9
CVE-2026-104432
Zebra before 6.3.0 False Readiness via Discarded One-Hash FindBlocks Response
Z
Patch status unknownEPSS %0
8.7
CVE-2026-104431
Zebra before 6.0.0 Denial of Service via Synchronous Script FFI Verification
Z
Patch status unknownEPSS %0