CVE-2026-35679CWE-358

Zcash zcashd before 6.12.0 allows invalid transactions to be accepted under certain conditions, which potentially could have resulted in the draining of user…

Low · published April 5, 2026

CVSS v3.1
3.5
EPSS
0%
Percentile
15.7
In the wild
Unconfirmed
What it is

Zcash zcashd before 6.12.0 allows invalid transactions to be accepted under certain conditions, which potentially could have resulted in the draining of user funds from the Sprout pool. It was sometimes not verifying Sprout proofs.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00252 · 15.7th percentile
Weakness
CWE-358 · Improperly Implemented Security Check for Standard
Published
2026-04-05T21:26Z
EPSS history
Timeline
  • 05 APR 21:26Z
    Zcash zcashd before 6.12.0 allows invalid transactions to be accepted under certain conditions, which potentially could have resulted in the draining of user…
    cvelistv5