{"vulnerability": "cve-2026-54496", "sightings": [{"uuid": "ed8b8e84-2fa8-4004-ad38-a891fa503882", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54496", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mpz2fiw6dh2r", "content": "CVE-2026-54496 - zebrad\nA vulnerability in the Zcash 'Orchard' system allows a malicious user to spend the same note multiple times, creating fake transactions that can't be detected. This means a user could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#zebrad #rust #CVE #infosec", "creation_timestamp": "2026-07-06T21:38:05.876735Z"}, {"uuid": "1ca0db6d-404f-4b1b-8f31-a8560aa772d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54496", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mquibd7ypf22", "content": "CVE-2026-54496 - Missing copy constraint in halo2_gadgets variable-base scalar multiplication allows under-constrained base, breaking Orchard Action circuit soundness\nCVE ID : CVE-2026-54496\n \n Published : July 17, 2026, 5:17 p.m. | 24\u00a0minutes ago\n \n Description : ZEBRA is a Z...", "creation_timestamp": "2026-07-17T19:28:11.102718Z"}, {"uuid": "176bb02f-7107-47e6-b8df-f492fd5b56b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54496", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqycsd3xw42c", "content": "\ud83d\udd34 CVE-2026-54496 - Critical (9.3)\n\nZEBRA is a Zcash node written entirely in Rust. Prior to zebrad 5.0.0, halo2_gadgets 0.5.0, orcha...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54496/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-19T08:00:58.634818Z"}]}