CVE-2026-35679
Low · 3.5CVSS
3.5
EPSS
0.3%
Published
Apr 5, 2026
CISA due date
—
The record
Zcash zcashd before 6.12.0 allows invalid transactions to be accepted under certain conditions, which potentially could have resulted in the draining of user funds from the Sprout pool. It was sometimes not verifying Sprout proofs.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-46582 In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, a replay of a wildcard rrset as… CWE-358
- CVE-2026-49783 Improperly implemented security check for standard in Windows Secure Boot allows an… CWE-358
- CVE-2026-11122 Inappropriate implementation in Keyboard in Google Chrome prior to 149.0.7827.53 allowed… CWE-358
- CVE-2026-11127 Inappropriate implementation in WebAPKs in Google Chrome on Android prior to… CWE-358
- CVE-2026-44475 Ella Core is a 5G core designed for private networks. CWE-358
- CVE-2026-44473 Ella Core is a 5G core designed for private networks. CWE-358
- CVE-2026-44474 Ella Core is a 5G core designed for private networks. CWE-358
- CVE-2026-42082 free5GC is an open-source implementation of the 5G core network. CWE-358