CVE-2026-104431 | ZcashFoundation Zebra up to 5.x Mempool is_valid denial of service

October 2, 2026 Yanac

A vulnerability labeled as problematic has been found in ZcashFoundation Zebra up to 5.x. This affects the function CachedFfiTransaction::is_valid of the component Mempool. Executing a manipulation can lead to denial of service.

This vulnerability is registered as CVE-2026-104431. It is possible to launch the attack remotely. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More