Zebra before 8.0.0 Denial of Service via z_listunifiedreceivers RPC

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-104434 · Microsoft / collected KEV context

EUVD-2026-91444

GHSA-fxgv-g76m-8hg2

GHSA-c8w6-x74f-vmg3

cve-program · CVE-2026-104434

• https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-c8w6-x74f-vmg3
• https://www.vulncheck.com/advisories/zebra-before-8.0.0-denial-of-service-via-z-listunifiedreceivers-rpc

euvd · EUVD-2026-91444

• https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-c8w6-x74f-vmg3
• https://www.vulncheck.com/advisories/zebra-before-8.0.0-denial-of-service-via-z-listunifiedreceivers-rpc

nvd · CVE-2026-104434

• https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-c8w6-x74f-vmg3
• https://www.vulncheck.com/advisories/zebra-before-8.0.0-denial-of-service-via-z-listunifiedreceivers-rpc

osv · GHSA-c8w6-x74f-vmg3

• https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-c8w6-x74f-vmg3
• https://github.com/ZcashFoundation/zebra
• https://github.com/ZcashFoundation/zebra/blob/d4cd662c716382f6397d2a730148025a1ca79fec/Cargo.toml#L305
• https://github.com/ZcashFoundation/zebra/blob/d4cd662c716382f6397d2a730148025a1ca79fec/zebra-rpc/src/methods.rs#L2867-L2914

No related operational record is retained in the current change model.