EUVD-2026-97665

ZcashFoundation Zebra 6.4.0 before 6.4.2 parses version 6 transactions carrying a pre-NU6.3 consensus branch ID, but the size computation during UnminedTx construction treats re-serialization of the Orchard bundle as infallible, so the resulting error trips an expect that aborts zebrad...

CVE-2026-104434

ZcashFoundation Zebra zebra-rpc before 8.0.0 and zebrad before 4.5.0 contain a reachable assertion in the zlistunifiedreceivers RPC handler, which calls expect on Sapling receiver parsing that fails for Unified Addresses carrying invalid Jubjub points. Authenticated RPC clients can submit such an...

EUVD-2026-91444

ZcashFoundation Zebra zebra-rpc before 8.0.0 and zebrad before 4.5.0 contain a reachable assertion in the zlistunifiedreceivers RPC handler, which calls expect on Sapling receiver parsing that fails for Unified Addresses carrying invalid Jubjub points. Authenticated RPC clients can submit such an...

CVE-2026-104434

ZcashFoundation Zebra software is affected by a reachability assertion in the z_listunifiedreceivers RPC handler. The vulnerability exists in zebra-rpc versions before 8.0.0 and zebrad versions before 4.5.0 . The issue occurs because the expect() function fails during Sapling receiver parsing whe...

CVE-2026-104425

ZcashFoundation Zebra versions before 6.1.0 are susceptible to a resource exhaustion vulnerability. Unauthenticated peers can degrade block processing by pushing transactions containing invalid Orchard proofs without being misbehavior-scored. By repeatedly pushing these invalid proofs into the sh...

CVE-2026-104425: Asymmetric Resource Consumption (Amplification)

ZcashFoundation Zebra before 6.1.0 contains a resource exhaustion vulnerability that allows unauthenticated peers to degrade block processing by pushing transactions with invalid Orchard proofs without being misbehavior-scored. Attackers can repeatedly push invalid proofs into the shared halo2...

CVE-2026-104434: Reachable Assertion

ZcashFoundation Zebra zebra-rpc before 8.0.0 and zebrad before 4.5.0 contain a reachable assertion in the zlistunifiedreceivers RPC handler, which calls expect on Sapling receiver parsing that fails for Unified Addresses carrying invalid Jubjub points. Authenticated RPC clients can submit such an...