Skip to content
Threat Feed
Subscribe

Product

Zebrad

2 briefs RSS
medium advisory

Zebra Node Denial-of-Service Vulnerability via Crafted Orchard Transactions (CVE-2026-41584)

A crafted Orchard transaction with a zero-value rk field can cause a Zebra node to crash due to a panic in the orchard crate, leading to a denial-of-service condition; this vulnerability is identified as CVE-2026-41584 and patched in zebrad version 4.3.1 and zebra-chain version 6.0.2.

zebra-chain +1 denial-of-service zcash cryptography
1r 1t 1c
critical advisory

Zebra Consensus Divergence in Transparent Sighash Hash-Type Handling (CVE-2026-44497)

Zebra versions prior to 4.4.0 exhibit a consensus divergence vulnerability (CVE-2026-44497) due to insufficient error handling of invalid sighash types during sighash computation, potentially leading to network partitioning and double-spend attacks.

zebrad +1 consensus-failure vulnerability network-partition
2r