Zebra
45 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Zebra, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.
Zebra CVEs per month
| Month | CVEs |
|---|---|
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 2 |
| 2026-04 | 0 |
| 2026-05 | 7 |
| 2026-06 | 0 |
| 2026-07 | 1 |
| 2026-08 | 10 |
| 2026-09 | 0 |
| 2026-10 | 22 |
Severity
How the 45 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical3
- High12
- Medium21
- Low5
Latest CVEs
The 15 most recently published vulnerabilities affecting Zebra.
- CVE-2026-109366Zebra before 6.4.0 Gossiped Block Drop via Forged Coinbase scriptSig Height3.7
- CVE-2026-109365Zebra before 6.4.0 Denial of Service via Same-Hash Forged Block Bodies3.7
- CVE-2026-109364Zebra 2.3.0 before 6.4.0 Peer Ban Bypass via Exact-IP Keying5.3
- CVE-2026-109363Zebra 6.4.0 before 6.4.2 Denial of Service via Malformed v6 Transaction7.5
- CVE-2026-104437Zebra before 4.4.0 Consensus Split via SIGHASH_SINGLE Missing-Output Handling7.4
- CVE-2026-104436Zebra before 4.5.0 CPU Amplification via Uncapped getblocks/getheaders Locator Length3.7
- CVE-2026-104435Zebra 4.4.0 Consensus Divergence via V5 SIGHASH_SINGLE Without Output7.4
- CVE-2026-104434Zebra before 8.0.0 Denial of Service via z_listunifiedreceivers RPC6.5
- CVE-2026-104432Zebra before 6.3.0 False Readiness via Discarded One-Hash FindBlocks Response5.3
- CVE-2026-104431Zebra before 6.0.0 Denial of Service via Synchronous Script FFI Verification7.5
- CVE-2026-104429Zebra before 6.0.0-rc.0 Per-Peer Mempool Admission Bypass via P2P tx Messages5.3
- CVE-2026-104430Zebra 4.5.0 Consensus Split via P2SH Sigop Overcount7.5
- CVE-2026-104428Zebra before 11.0.0 Denial of Service via getblock Verbosity 25.3
- CVE-2026-104426Zebra before 6.1.0 Quadratic Complexity DoS via Block Transparent Value Check5.9
- CVE-2026-104427Zebra before 6.1.0 Chain Stall via Stale parent_error_map Entry5.9
Product grouping is registry-driven, with AI assist and human review. How it works