zebrad has consensus divergence via P2SH sigop undercount in pure-Rust disabled-opcode parser

🗓️ 02 Jul 2026 19:43:36Reported by GitHub Advisory DatabaseType

Zebra up to v4.4.1 has consensus divergence on P2SH sigops due to disabled opcodes in the Rust path.

Reporter	Title	Published	Views	Family All 4
Circl	CVE-2026-52735	3 Jul 202621:50	–	circl
CVE	CVE-2026-52735	2 Jul 202619:43	–	cve
OSV	GHSA-GF9R-M956-97QX zebrad has consensus divergence via P2SH sigop undercount in pure-Rust disabled-opcode parser	2 Jul 202619:43	–	osv
Positive Technologies	PT-2026-55471	2 Jul 202600:00	–	ptsecurity

Vulners

Node

zfnd zebradRange≤4.4.1rust

zfnd zebra-scriptRange≤6.0.1rust

Source	Link
github	www.github.com/ZcashFoundation/zebra/security/advisories/GHSA-gf9r-m956-97qx
github	www.github.com/AlfredoG87/zcash_script/blob/v0.4.4/src/script/iter.rs
github	www.github.com/ZcashFoundation/zebra/blob/d4cd662c716382f6397d2a730148025a1ca79fec/zebra-consensus/src/block.rs
github	www.github.com/ZcashFoundation/zebra/blob/d4cd662c716382f6397d2a730148025a1ca79fec/zebra-script/src/lib.rs
github	www.github.com/advisories/GHSA-gf9r-m956-97qx

02 Jul 2026 19:43Current

6Medium risk

Vulners AI Score6