Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

zebra — Vulnerabilities & Security Advisories 42

All 42 CVE vulnerabilities found in zebra, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerabilities affecting Zebra Technologies products, categorized by specific weakness types and associated technical tags. It collects a comprehensive range of flaws, including memory corruption, authentication bypasses, and insecure default configurations, spanning from the earliest documented records to the most recent disclosures in the current year. Readers can utilize this data to track vendor-specific advisories over time, understand the prevalence and nature of particular weakness classes within the Zebra ecosystem, and examine the complete vulnerability history for individual device models or firmware versions. The interface facilitates detailed analysis for security teams seeking to prioritize remediation efforts based on historical trends and emerging threat patterns specific to industrial mobile computing and print solutions. By consolidating disparate reports into a structured view, this resource supports continuous monitoring and risk assessment strategies for organizations deploying Zebra hardware in operational environments. The focus remains strictly on factual vulnerability data, enabling users to correlate multiple incidents and identify systemic issues without navigating through fragmented individual database entries.

Vendor: ZcashFoundation

CVE ID Title CVSS Severity Published
CVE-2026-109366 Zebra before 6.4.0 Gossiped Block Drop via Forged Coinbase scriptSig Height CWE-354 3.7 Low 2026-10-12
CVE-2026-109365 Zebra before 6.4.0 Denial of Service via Same-Hash Forged Block Bodies CWE-345 3.7 Low 2026-10-12
CVE-2026-109364 Zebra 2.3.0 before 6.4.0 Peer Ban Bypass via Exact-IP Keying CWE-693 5.3 Medium 2026-10-12
CVE-2026-109363 Zebra 6.4.0 before 6.4.2 Denial of Service via Malformed v6 Transaction CWE-617 7.5 High 2026-10-12
CVE-2026-104437 Zebra before 4.4.0 Consensus Split via SIGHASH_SINGLE Missing-Output Handling CWE-347 7.4 High 2026-10-02
CVE-2026-104436 Zebra before 4.5.0 CPU Amplification via Uncapped getblocks/getheaders Locator Length CWE-770 3.7 Low 2026-10-02
CVE-2026-104435 Zebra 4.4.0 Consensus Divergence via V5 SIGHASH_SINGLE Without Output CWE-347 7.4 High 2026-10-02
CVE-2026-104434 Zebra before 8.0.0 Denial of Service via z_listunifiedreceivers RPC CWE-617 6.5 Medium 2026-10-02
CVE-2026-104431 Zebra before 6.0.0 Denial of Service via Synchronous Script FFI Verification CWE-405 7.5 High 2026-10-02
CVE-2026-104432 Zebra before 6.3.0 False Readiness via Discarded One-Hash FindBlocks Response CWE-754 5.3 Medium 2026-10-02
CVE-2026-104430 Zebra 4.5.0 Consensus Split via P2SH Sigop Overcount CWE-628 7.5 High 2026-10-02
CVE-2026-104429 Zebra before 6.0.0-rc.0 Per-Peer Mempool Admission Bypass via P2P tx Messages CWE-770 5.3 Medium 2026-10-02
CVE-2026-104428 Zebra before 11.0.0 Denial of Service via getblock Verbosity 2 CWE-617 5.3 Medium 2026-10-02
CVE-2026-104427 Zebra before 6.1.0 Chain Stall via Stale parent_error_map Entry CWE-459 5.9 Medium 2026-10-02
CVE-2026-104425 Zebra before 6.1.0 Batch-Verification Poisoning DoS via Unattributed Pushed Transactions CWE-405 5.3 Medium 2026-10-02
CVE-2026-104426 Zebra before 6.1.0 Quadratic Complexity DoS via Block Transparent Value Check CWE-407 5.9 Medium 2026-10-02
CVE-2026-104424 Zebra before 6.1.0 Incorrect Block Size Calculation in getblocktemplate CWE-131 3.7 Low 2026-10-02
CVE-2026-104423 Zebra before 6.2.1 Denial of Service via Uncapped V6 Shielded Proof Verification CWE-405 7.5 High 2026-10-02
CVE-2026-104422 Zebra before 6.3.0 Block Sync Denial of Service via Coinbase scriptSig Rewrite CWE-345 7.5 High 2026-10-02
CVE-2026-104421 Zebra before 6.2.1 Block Download Denial of Service via KnownBlock SentHashes Lockout CWE-459 5.3 Medium 2026-10-02
CVE-2026-104420 Zebra before 6.3.0 Peer Misbehavior Ban Bypass via Gossiped Blocks CWE-704 5.3 Medium 2026-10-02
CVE-2026-104419 Zebra before 6.3.0 Honest Peer Banning via Far-Ahead FindBlocks Hashes CWE-345 4.8 Medium 2026-10-02
CVE-2026-52829 ZEBRA: IPv4-Mapped Mempool Misbehavior Update Aborts Zebra Address Book CWE-617 7.5 High 2026-08-18
CVE-2026-52736 ZEBRA: Block suppression via NU5 same-header body poisoning of sent-hash cache CWE-459 8.7 High 2026-08-18
CVE-2026-52732 ZEBRA: Mempool transaction admission denial via single-peer inbound queue saturation CWE-770 5.3 Medium 2026-08-18
CVE-2026-52731 ZEBRA: Full node denial of service via non-ASCII LongPollId in getblocktemplate CWE-248 6.5 Medium 2026-08-18
CVE-2026-52733 ZEBRA: Persistent on-disk corruption of Sapling/Orchard subtree roots after chain fork via pop_tip CWE-459 6.5 Medium 2026-08-18
CVE-2026-52738 ZEBRA: Finalized address balance credit-first overflow on consensus-valid blocks CWE-248 6.9 Medium 2026-08-18
CVE-2026-52735 ZEBRA: Consensus divergence via P2SH sigop undercount in pure-Rust disabled-opcode parser CWE-684 9.3 Critical 2026-08-18
CVE-2026-52739 ZEBRA: Repeated Non-Finalized Shielded Transaction Aborts Zebra Before Duplicate-Nullifier Rejection CWE-248 5.9 Medium 2026-08-18

All 42 known CVE vulnerabilities affecting zebra with full Chinese analysis, references, and POCs where available.