Skip to content
Threat Feed

CPE

Cpe:2.3:a:zfnd:zebrad:*:*:*:*:*:rust:*:*

1 brief RSS
medium advisory

Zebra Node Denial-of-Service Vulnerability via Crafted Orchard Transactions (CVE-2026-41584)

A crafted Orchard transaction with a zero-value rk field can cause a Zebra node to crash due to a panic in the orchard crate, leading to a denial-of-service condition; this vulnerability is identified as CVE-2026-41584 and patched in zebrad version 4.3.1 and zebra-chain version 6.0.2.

zebra-chain +1 denial-of-service zcash cryptography
1r 1t 1c