# ZenHive vulnerabilities Source: https://junglewise.ai/threats/vendors/zenhive Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/zenhive.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 15 vulnerabilities in ZenHive: 0 in the last 7 days and 12 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, mpp gas limit validation failure in broadcast_and_verify, was published on 25 September 2026. Nothing in the last four weeks, down from 6 vulnerabilities in the four before. 2 technologies have a page of their own. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 12 - All time: 15 (0 critical, 0 exploited in the wild) ## About ZenHive LiquidFiles is a provider of secure file transfer and sharing solutions. ## Latest ZenHive vulnerabilities - [mpp gas limit validation failure in broadcast_and_verify](https://junglewise.ai/threats/mpp-vulnerable-to-gas-draining-with-low-gas-limit-9a9ae054) (high, published 25 Sep 2026) - [ZenHive mpp input validation bypass in fee-payer cosigning](https://junglewise.ai/threats/mpp-vulnerable-to-gas-draining-with-no-limit-9bf9cd33) (high, published 25 Sep 2026) - [CVE-2026-89420: ZenHive mpp authorization bypass in payment channel validation](https://junglewise.ai/threats/cve-2026-89420-improper-validation-of-specified-quantity-in-input-in-zenhive-mpp) (info, published 22 Sep 2026) - [CVE-2026-87119: ZenHive mpp authentication bypass in subscription activation](https://junglewise.ai/threats/cve-2026-87119-authentication-bypass-by-capture-replay-in-zenhive-mpp-allows-an) (info, published 22 Sep 2026) - [CVE-2026-89186: ZenHive mpp HTTP cache header override vulnerability](https://junglewise.ai/threats/cve-2026-89186-zenhive-mpp-http-cache-header-override-vulnerability) (info, CVSS 0, published 16 Sep 2026) - [CVE-2026-88255: ZenHive mpp duplicate-submission bypass in Tempo deduplication](https://junglewise.ai/threats/cve-2026-88255-zenhive-mpp-duplicate-submission-bypass-in-tempo-deduplication) (info, CVSS 6.5, published 16 Sep 2026) - [CVE-2026-82751: ZenHive mpp improper validation in fee-payer gas calculation](https://junglewise.ai/threats/cve-2026-82751-zenhive-mpp-improper-validation-in-fee-payer-gas-calculation) (info, published 6 Sep 2026) - [CVE-2026-82750: ZenHive mpp improper gas cost validation in sponsored payments](https://junglewise.ai/threats/cve-2026-82750-zenhive-mpp-improper-gas-cost-validation-in-sponsored-payments) (info, CVSS 0, published 6 Sep 2026) - [CVE-2026-73829: ZenHive mpp TOCTOU race condition in payment verification](https://junglewise.ai/threats/cve-2026-73829-zenhive-mpp-toctou-race-condition-in-payment-verification) (low, CVSS 3.7, published 19 Aug 2026) - [CVE-2026-73541: ZenHive mpp resource exhaustion via concurrent sponsored payments](https://junglewise.ai/threats/cve-2026-73541-zenhive-mpp-resource-exhaustion-via-concurrent-sponsored-payments) (high, CVSS 8.2, published 19 Aug 2026) - [CVE-2026-73136: ZenHive mpp authentication bypass in capture-replay](https://junglewise.ai/threats/cve-2026-73136-zenhive-mpp-authentication-bypass-in-capture-replay) (high, CVSS 7.5, published 19 Aug 2026) - [CVE-2026-67581: ZenHive mpp authentication bypass in EVM payment verification](https://junglewise.ai/threats/cve-2026-67581-zenhive-mpp-authentication-bypass-in-evm-payment-verification) (high, CVSS 7.5, published 19 Aug 2026) - [CVE-2026-59695: ZenHive mpp improper input validation in Tempo fee-payer](https://junglewise.ai/threats/cve-2026-59695-zenhive-mpp-improper-input-validation-in-tempo-fee-payer) (info, CVSS 8.3, published 17 Jul 2026) - [CVE-2026-59694: ZenHive mpp gas cost inflation via unvalidated access list](https://junglewise.ai/threats/cve-2026-59694-zenhive-mpp-gas-cost-inflation-via-unvalidated-access-list) (info, CVSS 8.3, published 17 Jul 2026) - [CVE-2026-59252: ZenHive mpp improper gas limit validation in MPP.Methods.Tempo](https://junglewise.ai/threats/cve-2026-59252-zenhive-mpp-improper-gas-limit-validation-in-mpp-methods-tempo) (info, CVSS 8.2, published 17 Jul 2026) ## Most severe ZenHive vulnerabilities - [CVE-2026-73541: ZenHive mpp resource exhaustion via concurrent sponsored payments](https://junglewise.ai/threats/cve-2026-73541-zenhive-mpp-resource-exhaustion-via-concurrent-sponsored-payments) (high, CVSS 8.2, published 19 Aug 2026) - [CVE-2026-73136: ZenHive mpp authentication bypass in capture-replay](https://junglewise.ai/threats/cve-2026-73136-zenhive-mpp-authentication-bypass-in-capture-replay) (high, CVSS 7.5, published 19 Aug 2026) - [CVE-2026-67581: ZenHive mpp authentication bypass in EVM payment verification](https://junglewise.ai/threats/cve-2026-67581-zenhive-mpp-authentication-bypass-in-evm-payment-verification) (high, CVSS 7.5, published 19 Aug 2026) - [mpp gas limit validation failure in broadcast_and_verify](https://junglewise.ai/threats/mpp-vulnerable-to-gas-draining-with-low-gas-limit-9a9ae054) (high, published 25 Sep 2026) - [ZenHive mpp input validation bypass in fee-payer cosigning](https://junglewise.ai/threats/mpp-vulnerable-to-gas-draining-with-no-limit-9bf9cd33) (high, published 25 Sep 2026) - [CVE-2026-73829: ZenHive mpp TOCTOU race condition in payment verification](https://junglewise.ai/threats/cve-2026-73829-zenhive-mpp-toctou-race-condition-in-payment-verification) (low, CVSS 3.7, published 19 Aug 2026) - [CVE-2026-59695: ZenHive mpp improper input validation in Tempo fee-payer](https://junglewise.ai/threats/cve-2026-59695-zenhive-mpp-improper-input-validation-in-tempo-fee-payer) (info, CVSS 8.3, published 17 Jul 2026) - [CVE-2026-59694: ZenHive mpp gas cost inflation via unvalidated access list](https://junglewise.ai/threats/cve-2026-59694-zenhive-mpp-gas-cost-inflation-via-unvalidated-access-list) (info, CVSS 8.3, published 17 Jul 2026) - [CVE-2026-59252: ZenHive mpp improper gas limit validation in MPP.Methods.Tempo](https://junglewise.ai/threats/cve-2026-59252-zenhive-mpp-improper-gas-limit-validation-in-mpp-methods-tempo) (info, CVSS 8.2, published 17 Jul 2026) - [CVE-2026-88255: ZenHive mpp duplicate-submission bypass in Tempo deduplication](https://junglewise.ai/threats/cve-2026-88255-zenhive-mpp-duplicate-submission-bypass-in-tempo-deduplication) (info, CVSS 6.5, published 16 Sep 2026) ## Vulnerabilities per week Nothing in the last four weeks, down from 6 vulnerabilities in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 4 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 2 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 2 | 0 | 0 | | 21 Sep 2026 | 4 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## ZenHive technologies - [ZenHive Mpp](https://junglewise.ai/threats/technologies/mpp): 15 vulnerabilities - [ZenHive Machine Payments Protocol](https://junglewise.ai/threats/technologies/machine-payments-protocol): 4 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "ZenHive vulnerabilities", https://junglewise.ai/threats/vendors/zenhive, 9 November 2026.