{"id":"CVE-2026-104437","title":"Zebra before 4.4.0 contains a consensus divergence vulnerability in V5 transparent signature verification, computing a ZIP-244 digest for SIGHASH_SINGLE inputs lacking corresponding outputs instead of failing","summary":"Zebra before 4.4.0 contains a consensus divergence vulnerability in V5 transparent signature verification, computing a ZIP-244 digest for SIGHASH_SINGLE inputs lacking corresponding outputs instead of failing. Attackers can craft V5 tran…","severity":"high","cvss":7.4,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","cwe":["CWE-347"],"vendor":"ZcashFoundation","product":"zebra","affected":["zebra < 4.4.0"],"patched":["zebrad 4.4.0"],"published":"2026-10-02","updated":"2026-10-06","sourceUpdated":"2026-10-06T03:17:00.670","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-104437","references":[{"url":"https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-cwfq-rfcr-8hmp","label":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/zebra-before-4.4.0-consensus-split-via-sighash-single-missing-output-handling","label":"disclosure@vulncheck.com"},{"url":"https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-cwfq-rfcr-8hmp","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"url":"https://github.com/ZcashFoundation/zebra"},{"url":"https://github.com/ZcashFoundation/zebra/releases/tag/v4.4.0"}],"tags":["nvd","cve.org","exploit-available","osv","rust"],"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"total","timestamp":"2026-10-06T02:42:33.915856Z"},"epss":0.00247,"epssPercentile":0.15938,"aliases":["GHSA-cwfq-rfcr-8hmp"],"ecosystem":"rust","ingestedAt":"2026-10-02T12:17:44.335Z","slug":"CVE-2026-104437","body":"## Overview\n\nZebra before 4.4.0 contains a consensus divergence vulnerability in V5 transparent signature verification, computing a ZIP-244 digest for SIGHASH_SINGLE inputs lacking corresponding outputs instead of failing. Attackers can craft V5 transactions with fewer outputs than inputs that Zebra accepts and templates via getblocktemplate, producing blocks zcashd rejects.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Package advisory (CVE-2026-104437)\n\nAffected packages:\n\n- `zebrad < 4.4.0`\n\nPatched in:\n\n- `zebrad 4.4.0`\n\nSource: https://osv.dev/vulnerability/GHSA-cwfq-rfcr-8hmp","depth":"midnight","depthScore":53,"depthScoreParts":{"impact":40.7,"likelihood":0,"exploitation":12,"ransomware":0},"changes":[{"seq":216170,"id":"CVE-2026-104437","ts":1791265679529,"field":"exploit_available","old":"false","new":"true"}]}