# Zcash Foundation Zebrad vulnerabilities Source: https://junglewise.ai/threats/technologies/zcash-foundation-zebrad Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/zcash-foundation-zebrad.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 7 vulnerabilities in Zcash Foundation Zebrad: 2 in the last 7 days and 5 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-123558, was published on 8 November 2026. 2 vulnerabilities in the last four weeks, down 33% on the four before (3). ## Counts - Last 7 days: 2 - Last 30 days: 2 - Last 90 days: 5 - All time: 7 (1 critical, 0 exploited in the wild) ## About Zcash Foundation Zebrad Zcash Foundation implementation of the Zcash blockchain protocol. ## Latest Zcash Foundation Zebrad vulnerabilities - [CVE-2026-123558: Zebra zebrad denial of service in checkpoint sync verification](https://junglewise.ai/threats/cve-2026-123558-zebra-zebrad-before-7-0-0-contains-a-denial-of-service) (high, CVSS 7.5, published 8 Nov 2026) - [CVE-2026-123554: Zcash zebrad quadratic work in mempool coinbase-maturity check](https://junglewise.ai/threats/cve-2026-123554-zebra-zebrad-6-4-0-before-7-0-0-performs-quadratic-work-in-the) (high, CVSS 7.5, published 8 Nov 2026) - [CVE-2026-104435: Zebra consensus rule enforcement bypass in V5 SIGHASH_SINGLE](https://junglewise.ai/threats/cve-2026-104435-zebra-zebrad-4-4-0-and-zebra-script-6-0-0-fail-to-enforce-a-zip) (high, CVSS 7.4, published 2 Oct 2026) - [CVE-2026-104434: Zcash Foundation Zebra reachable assertion in z_listunifiedreceivers RPC handler](https://junglewise.ai/threats/cve-2026-104434-zcashfoundation-zebra-zebra-rpc-before-8-0-0-and-zebrad-before-4) (medium, CVSS 6.5, published 2 Oct 2026) - [CVE-2026-104430: Zebra P2SH sigop counting consensus divergence](https://junglewise.ai/threats/cve-2026-104430-zebra-zebrad-4-5-0-and-zebra-script-7-0-0-count-p2sh-redeem) (high, CVSS 7.5, published 2 Oct 2026) - [CVE-2026-41583: Zcash Foundation Zebra consensus divergence in sighash handling](https://junglewise.ai/threats/cve-2026-41583-zcash-foundation-zebra-consensus-divergence-in-sighash-handling) (critical, CVSS 9.1, published 8 May 2026) - [CVE-2026-40881: Zcash Foundation Zebra resource exhaustion in addr message deserialization](https://junglewise.ai/threats/cve-2026-40881-zcash-foundation-zebra-resource-exhaustion-in-addr-message) (high, CVSS 7.5, published 21 Apr 2026) ## Most severe Zcash Foundation Zebrad vulnerabilities - [CVE-2026-41583: Zcash Foundation Zebra consensus divergence in sighash handling](https://junglewise.ai/threats/cve-2026-41583-zcash-foundation-zebra-consensus-divergence-in-sighash-handling) (critical, CVSS 9.1, published 8 May 2026) - [CVE-2026-104430: Zebra P2SH sigop counting consensus divergence](https://junglewise.ai/threats/cve-2026-104430-zebra-zebrad-4-5-0-and-zebra-script-7-0-0-count-p2sh-redeem) (high, CVSS 7.5, published 2 Oct 2026) - [CVE-2026-40881: Zcash Foundation Zebra resource exhaustion in addr message deserialization](https://junglewise.ai/threats/cve-2026-40881-zcash-foundation-zebra-resource-exhaustion-in-addr-message) (high, CVSS 7.5, published 21 Apr 2026) - [CVE-2026-123558: Zebra zebrad denial of service in checkpoint sync verification](https://junglewise.ai/threats/cve-2026-123558-zebra-zebrad-before-7-0-0-contains-a-denial-of-service) (high, CVSS 7.5, published 8 Nov 2026) - [CVE-2026-123554: Zcash zebrad quadratic work in mempool coinbase-maturity check](https://junglewise.ai/threats/cve-2026-123554-zebra-zebrad-6-4-0-before-7-0-0-performs-quadratic-work-in-the) (high, CVSS 7.5, published 8 Nov 2026) - [CVE-2026-104435: Zebra consensus rule enforcement bypass in V5 SIGHASH_SINGLE](https://junglewise.ai/threats/cve-2026-104435-zebra-zebrad-4-4-0-and-zebra-script-6-0-0-fail-to-enforce-a-zip) (high, CVSS 7.4, published 2 Oct 2026) - [CVE-2026-104434: Zcash Foundation Zebra reachable assertion in z_listunifiedreceivers RPC handler](https://junglewise.ai/threats/cve-2026-104434-zcashfoundation-zebra-zebra-rpc-before-8-0-0-and-zebrad-before-4) (medium, CVSS 6.5, published 2 Oct 2026) ## Vulnerabilities per week 2 vulnerabilities in the last four weeks, down 33% on the four before (3). | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 3 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 2 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Zcash Foundation technologies - [Zcash Foundation Zebra](https://junglewise.ai/threats/technologies/zebra): 25 vulnerabilities - [Zcash Foundation Zebra-Script](https://junglewise.ai/threats/technologies/zcash-foundation-zebra-script): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Zcash Foundation Zebrad vulnerabilities", https://junglewise.ai/threats/technologies/zcash-foundation-zebrad, 9 November 2026.