Zcash vulnerabilities
We track 1 vulnerability in Zcash products across 4 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 17, 2026.
1vulnerabilities
1critical
0high
0exploited
9.3average CVSS score
Latest Zcash vulnerabilities
- 9.3 Critical severity
zebra: Insufficient Verification of Data Authenticity
ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad 5.0.0, halo2_gadgets 0.5.0, orchard 0.14.0, zcash_primitives 0.28.0, and zcashd 6.20.0, the variable-base scalar multiplication gadget in halo2_gadgets/src/ecc/chip/mul/incomplete.rs used assign_a