What is CVE-2026-52829?
In ZEBRA Zcash node versions prior to 4.5.0, an unauthenticated IPv4 peer can deterministically crash a synced node on default Linux dual-stack listener configurations. The vulnerability stems from improper canonicalization of IPv4-mapped IPv6 PeerSocketAddr during the handshake path. Upgrading to version 4.5.0 or later is recommended.
Azərbaycanca: ZEBRA Zcash node-un 4.5.0 versiyasından əvvəlki versiyalarında autentifikasiya olunmamış IPv4 peer, default Linux dual-stack listener konfiqurasiyasında sinxronizə olunmuş node-u dayandıra bilər. Bu zəiflik handshake zamanı IPv4-mapped IPv6 PeerSocketAddr-in səhv canonicalization-ından qaynaqlanır. İstifadəçilərə 4.5.0 və ya daha yuxarı versiyaya yeniləmə tövsiyə olunur.
FAQ2
What versions of ZEBRA Zcash node are affected by CVE-2026-52829?
This vulnerability affects ZEBRA Zcash node versions prior to 4.5.0.
What is the recommended mitigation for CVE-2026-52829?
Upgrading to version 4.5.0 or later is recommended.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.