What’s Vulnerable › Products

ZenHive Machine Payments Protocol vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your ZenHive Machine Payments Protocol version is affected

Latest ZenHive Machine Payments Protocol vulnerabilities

• CVE-2026-73829 — Non-atomic hash-credential dedup in mpp Tempo allows replay of a confirmed payment under a concurrent race (CVSS 3.7)
• CVE-2026-73541 — Tempo fee sponsorship in mpp bounds each transaction but not aggregate exposure, allowing concurrent sponsor-wallet drain (CVSS 8.2)
• CVE-2026-73136 — Static memo configuration in mpp Tempo disables per-challenge attribution binding, enabling third-party replay (CVSS 7.5)
• CVE-2026-67581 — On-chain transfer proof is not single-use in mpp EVM payment method, enabling cross-challenge replay (CVSS 7.5)