CVE-2026-51133
Cross Site Scripting vulnerability in za-internet GmbH C-MOR Video Surveillance <= V6.0104 allows a remote attacker to execute arbitrary code via the size parameter in ptzpreset.pml component and the showmovies.pml component
- Published Sep 15, 2026
- CVSS 6.1 medium
- 0.9% chance of exploitation in the next 30 days (EPSS)
- Public exploit code is available