CVE-2026-52738 | ZcashFoundation Zebra up to 4.4.x Finalized State Writer transparent.rs input validation

A vulnerability was found in ZcashFoundation Zebra up to 4.4.x. It has been declared as problematic. The affected element is an unknown function of the file zebra-state/src/service/finalized_state/zebra_db/transparent.rs of the component Finalized State Writer. Executing a manipulation can lead to improper input validation.

This vulnerability is handled as CVE-2026-52738. The attack can be executed remotely. There is not any exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More