{"id":"EUVD-2026-91445","enisaUuid":"aee9b6ec-4c72-37dc-afaf-d6fad6888615","description":"Zebra zebrad 4.4.0 and zebra-script 6.0.0 fail to enforce a ZIP-244 consensus rule, accepting V5 transparent inputs signed with SIGHASH_SINGLE that lack a corresponding output. Attackers can broadcast crafted V5 transactions with more inputs than outputs that Zebra accepts but zcashd rejects, causing a network consensus split.","datePublished":"Oct 2, 2026, 11:38:12 AM","dateUpdated":"Oct 2, 2026, 3:16:42 PM","baseScore":8.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-pvmv-cwg8-v6c8\nhttps://www.vulncheck.com/advisories/zebra-4.4.0-consensus-divergence-via-v5-sighash-single-without-output\n","aliases":"CVE-2026-104435\nGHSA-gm38-j348-x4mq\n","assigner":"VulnCheck","epss":0.21,"enisaIdProduct":[{"id":"1ada0ce9-bdc2-386c-8fa7-cebb53e6d703","product":{"name":"zebra","vendor":{"name":"ZcashFoundation"}},"product_version":"4.4.0 \u003c4.4.1"},{"id":"1fd9cc6d-b566-37c5-8159-d683c862e0be","product":{"name":"zebra","vendor":{"name":"ZcashFoundation"}},"product_version":"6.0.0 \u003c6.0.1"}],"enisaIdVendor":[{"id":"c52e219c-64c6-3bb6-8ae7-6765c2d7254e","vendor":{"name":"ZcashFoundation"}}],"enisaIdVulnerability":[{"id":"025e4737-f632-3ce3-a262-28d5ecd8a866","vulnerability":{"id":"GHSA-gm38-j348-x4mq","description":"Zebra zebrad 4.4.0 and zebra-script 6.0.0 fail to enforce a ZIP-244 consensus rule, accepting V5 transparent inputs signed with SIGHASH_SINGLE that lack a corresponding output. Attackers can broadcast crafted V5 transactions with more inputs than outputs that Zebra accepts but zcashd rejects, causing a network consensus split.","datePublished":"Oct 2, 2026, 12:31:15 PM","dateUpdated":"Oct 2, 2026, 12:31:15 PM","baseScore":0.0,"references":"https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-pvmv-cwg8-v6c8\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-104435\nhttps://www.vulncheck.com/advisories/zebra-4.4.0-consensus-divergence-via-v5-sighash-single-without-output\n","enisa_id":"EUVD-2026-91445\n","aliases":"CVE-2026-104435\nGHSA-gm38-j348-x4mq\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 2:02:26 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"5d60dfcd-51da-3b93-9459-29d9c8d1917e","vulnerability":{"id":"CVE-2026-104435","description":"Zebra zebrad 4.4.0 and zebra-script 6.0.0 fail to enforce a ZIP-244 consensus rule, accepting V5 transparent inputs signed with SIGHASH_SINGLE that lack a corresponding output. Attackers can broadcast crafted V5 transactions with more inputs than outputs that Zebra accepts but zcashd rejects, causing a network consensus split.","datePublished":"Oct 2, 2026, 11:38:12 AM","dateUpdated":"Oct 2, 2026, 3:16:42 PM","status":"PUBLISHED","baseScore":8.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-pvmv-cwg8-v6c8\nhttps://www.vulncheck.com/advisories/zebra-4.4.0-consensus-divergence-via-v5-sighash-single-without-output\n","enisa_id":"EUVD-2026-91445\n","assigner":"VulnCheck","epss":0.21,"dataProcessed":"Oct 29, 2026, 7:15:38 AM","vulnerabilityProduct":[{"id":"bf5623a9-e757-31fd-ad14-868429cedb2e","product":{"name":"zebra","vendor":{"name":"ZcashFoundation"}},"product_version":"6.0.0 \u003c6.0.1"},{"id":"f93eaa96-eeac-3062-bb22-9f2a1996543f","product":{"name":"zebra","vendor":{"name":"ZcashFoundation"}},"product_version":"4.4.0 \u003c4.4.1"}],"vulnerabilityVendor":[{"id":"81ee36eb-cd45-363c-bd17-f8488f2c16d2","vendor":{"name":"ZcashFoundation"}}]}}],"enisaIdAdvisory":[]}