zfnd records

10 published records for vendor zfnd.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 1
With a fix record: 100%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

10 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
37Monitor	CVE-2026-41583No exploit	ZEBRA: Consensus Divergence in Transparent Sighash Hash-Type Handlingzfnd · zebra-script · CWE-573 Pre-auth	Critical9.3	—	0.2%	May 8, 2026
37Monitor	CVE-2026-44497No exploit	ZEBRA: Consensus Divergence in Transparent Sighash Hash-Type Handling due to Stale Bufferzfnd · zebra-script · CWE-347 Pre-auth Weak crypto	Critical9.3	—	0.1%	May 8, 2026
36Monitor	CVE-2026-34202No exploit	Zebra node crash — V5 transaction hash panic (P2P reachable)zfnd · zebra · CWE-94 pre-auth RCE Deserialization	Critical9.2	—	0.7%	Mar 31, 2026
36Monitor	CVE-2026-44498No exploit	ZEBRA: Block Validator Undercounts Coinbase and P2SH Sigopszfnd · zebrad · CWE-682 Pre-auth	Critical9.2	—	0.2%	May 8, 2026
36Monitor	CVE-2026-41584No exploit	ZEBRA: rk Identity Point Panic in Transaction Verificationzfnd · zebra-chain · CWE-617 Pre-auth	Critical9.2	—	0.2%	May 8, 2026
33Monitor	CVE-2026-34377No exploit	Zebra has a Consensus Failure due to Improper Verification of V5 Transactionszfnd · zebra · CWE-347 Weak crypto	High8.4	—	0.2%	Mar 31, 2026
28Monitor	CVE-2026-40880No exploit	Zebra: Cached Mempool Verification Bypasses Consensus Rules for Ahead-of-Tip Blockszfnd · zebra-consensus · CWE-1025	High7.2	—	0.2%	Apr 21, 2026
27Monitor	CVE-2026-41585No exploit	ZEBRA: Denial of Service via Interrupted JSON-RPC Requests from Authenticated Clientszfnd · zebra-rpc · CWE-248	Medium6.9	—	0.2%	May 8, 2026
25Monitor	CVE-2026-40881No exploit	Zebra: addr/addrv2 Deserialization Resource Exhaustionzfnd · zebra-network · CWE-770 Pre-auth Deserialization Denial of service	Medium6.3	—	0.2%	Apr 21, 2026
21Monitor	CVE-2026-44500No exploit	ZEBRA: Allocation Amplification in Inbound Network Deserializerszfnd · zebra-chain · CWE-770 Pre-auth Deserialization Denial of service	Medium5.3	—	0.3%	May 8, 2026

CVE-2026-41583
37Monitor
ZEBRA: Consensus Divergence in Transparent Sighash Hash-Type Handling
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
zfnd · zebra-scriptMay 8, 2026
CVE-2026-44497
37Monitor
ZEBRA: Consensus Divergence in Transparent Sighash Hash-Type Handling due to Stale Buffer
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Weak crypto
zfnd · zebra-scriptMay 8, 2026
CVE-2026-34202
36Monitor
Zebra node crash — V5 transaction hash panic (P2P reachable)
CriticalCVSS 9.2No exploitEPSS 0%
- pre-auth RCE
- Deserialization
zfnd · zebraMar 31, 2026
CVE-2026-44498
36Monitor
ZEBRA: Block Validator Undercounts Coinbase and P2SH Sigops
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
zfnd · zebradMay 8, 2026
CVE-2026-41584
36Monitor
ZEBRA: rk Identity Point Panic in Transaction Verification
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
zfnd · zebra-chainMay 8, 2026
CVE-2026-34377
33Monitor
Zebra has a Consensus Failure due to Improper Verification of V5 Transactions
HighCVSS 8.4No exploitEPSS 0%
- Weak crypto
zfnd · zebraMar 31, 2026
CVE-2026-40880
28Monitor
Zebra: Cached Mempool Verification Bypasses Consensus Rules for Ahead-of-Tip Blocks
HighCVSS 7.2No exploitEPSS 0%
zfnd · zebra-consensusApr 21, 2026
CVE-2026-41585
27Monitor
ZEBRA: Denial of Service via Interrupted JSON-RPC Requests from Authenticated Clients
MediumCVSS 6.9No exploitEPSS 0%
zfnd · zebra-rpcMay 8, 2026
CVE-2026-40881
25Monitor
Zebra: addr/addrv2 Deserialization Resource Exhaustion
MediumCVSS 6.3No exploitEPSS 0%
zfnd · zebra-networkApr 21, 2026
CVE-2026-44500
21Monitor
ZEBRA: Allocation Amplification in Inbound Network Deserializers
MediumCVSS 5.3No exploitEPSS 0%
zfnd · zebra-chainMay 8, 2026