Is CVE-2026-104437 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-104437?

CVE-2026-104437 has a CVSS v3 severity of HIGH (7.4).

Back

CVE-2026-104437

Description

Zebra before 4.4.0 contains a consensus divergence vulnerability in V5 transparent signature verification, computing a ZIP-244 digest for SIGHASH_SINGLE inputs lacking corresponding outputs instead of failing. Attackers can craft V5 transactions with fewer outputs than inputs that Zebra accepts and templates via getblocktemplate, producing blocks zcashd rejects.