low3.5
CVE-2026-35679
Zcash zcashd before 6.12.0 allows invalid transactions to be accepted under certain conditions, which potentially could have resulted in the draining of user f…
Impact
Zcash zcashd before 6.12.0 allows invalid transactions to be accepted under certain conditions, which potentially could have resulted in the draining of user funds from the Sprout pool. It was sometimes not verifying Sprout proofs.
Affected products
| Product | Affected versions |
|---|---|
| Zcash Zcashd | before 6.12.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.