Zoneminder

5 known vulnerabilities in Zoneminder, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-102297 CVSS 5.3 medium ZoneMinder before 1.38.4 fails to apply per-monitor access restrictions in the FramesController index endpoint. Authenticated users with…
  • CVE-2026-102296 CVSS 8.3 high ZoneMinder before 1.38.4 contains static buffer overflow vulnerabilities in RemoteCameraHttp::GetResponse() that allow malicious HTTP…
  • CVE-2024-58386 CVSS 7.1 high ZoneMinder versions 1.37.0 before 1.38.0 contain a path traversal vulnerability in the files view that allows authenticated users to read…
  • CVE-2026-54258 CVSS 6.5 medium ZoneMinder is a free, open source closed-circuit television software application. Versions prior to 1.36.39, 1.38.4, and 1.39.11 allow an…
  • CVE-2026-76060 CVSS 8.7 high An authenticated OS command injection vulnerability exists in ZoneMinder's event export functionality. The exportFile HTTP request…