CVE-2026-35679_CVE-2026-35679

3.5 / 10

LOW

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N

Description

Zcash zcashd before 6.12.0 allows invalid transactions to be accepted under certain conditions, which potentially could have resulted in the draining of user funds from the Sprout pool. It was sometimes not verifying Sprout proofs.

Basic Information

ID CVE-2026-35679

Source mitre

Published Apr 5, 2026 at 21:26

Modified Apr 6, 2026 at 14:04

Affected Product

Vendor Zcash

Product zcashd

Affected Versions Zcash zcashd 0

CWE Classification

CWE-358

References

{
    "lastseen": "",
    "description": "Zcash zcashd before 6.12.0 allows invalid transactions to be accepted under certain conditions, which potentially could have resulted in the draining of user funds from the Sprout pool. It was sometimes not verifying Sprout proofs.",
    "published": "2026-04-05T21:26:58.622Z",
    "modified": "2026-04-06T14:04:35.190Z",
    "type": "cve",
    "title": "CVE-2026-35679",
    "source": "mitre",
    "references": "https://github.com/zcash/zcash/releases/tag/v6.12.0\nhttps://github.com/zcash/zcash/commit/db969c63f48f0f9fc518112ed0b7ace1af78b9d0",
    "id": "CVE-2026-35679",
    "bulletinFamily": "",
    "cwe": [
        "CWE-358"
    ],
    "cvelist": null,
    "sourceData": "Zcash zcashd 0",
    "sourceHref": "",
    "cvss": {
        "score": 3.5,
        "severity": "LOW",
        "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "zcashd",
    "version": "0",
    "vendor": "Zcash",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}