https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T21:27:41.588826+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-44498 CVE-2026-44498 — ZEBRA: Block Validator Undercounts Coinbase and P2SH Sigops 2026-10-09T21:27:41.590222+00:00

Affected: ZcashFoundation zebra

ZEBRA is a Zcash node written entirely in Rust. Prior to version 4.4.0, Zebra's block validator undercounts transparent signature operations against the 20000-sigop block limit (MAX_BLOCK_SIGOPS), allowing it to accept blocks that zcashd rejects with bad-blk-sigops. A miner who produces such a block can split the network: Zebra nodes follow the offending chain while zcashd nodes do not. This issue has been patched in version 4.4.0.