Zenhive

13 CVEs across 2 Zenhive products. Browse Zenhive vulnerabilities, severities, and proof-of-concept exploits.

Zenhive products with known CVEs

ProductCVEs
Mpp13
Machine Payments Protocol4
Zenhive CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-894202026-09-22Improper Validation of Specified Quantity in Input in ZenHive mpp allows a client holding an open payment channel to obtain paid resources without being charge…
CVE-2026-871192026-09-22Authentication Bypass by Capture-replay in ZenHive mpp allows an attacker holding a captured subscription activation credential to charge the payer repeatedly…
CVE-2026-891862026-09-16Use of Cache Containing Sensitive Information in ZenHive mpp allows a shared HTTP cache to store a paid response and serve it to clients that never paid. MPP…
CVE-2026-882552026-09-16Improper Validation of Unsafe Equivalence in Input in ZenHive mpp allows an unauthenticated remote client to pass the Tempo duplicate-submission gate twice wit…
CVE-2026-827512026-09-06Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-payer's gas cost per sponsored pay…
CVE-2026-827502026-09-06Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-payer's gas cost per sponsored pay…
CVE-2026-73829Low3.72026-08-19Time-of-check Time-of-use (TOCTOU) Race Condition in ZenHive mpp allows an unauthenticated remote client to redeem one confirmed on-chain payment for multiple…
CVE-2026-73541High8.22026-08-19Allocation of Resources Without Limits or Throttling in ZenHive mpp allows an unauthenticated remote client to drain the fee-payer wallet through concurrent sp…
CVE-2026-73136High7.52026-08-19Authentication Bypass by Capture-replay in ZenHive mpp allows an unauthenticated third party to obtain paid resources by replaying a transfer settled by an unr…
CVE-2026-67581High7.52026-08-19Authentication Bypass by Capture-replay in ZenHive mpp allows an unauthenticated remote client to obtain paid resources by resubmitting one settled on-chain tr…
CVE-2026-596952026-07-17Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to drain the fee-payer wallet in a single request by…
CVE-2026-596942026-07-17Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-payer's gas cost per payment by a…
CVE-2026-592522026-07-17Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to drain the fee-payer wallet, resulting in denial of…