[ Vendor · 7 CVEs ]
ZoneMinder
CVEs affecting ZoneMinder published in the last 30 days, plus any ZoneMinder CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-30971 | 16 Oct 2026 | CVSS 8.8 | zoneminderZoneMinder is a free, open source closed-circuit television software application. Prior to 1.39.2, 1.38.2, and 1.36.40, ZoneMinder interpolates an… | |
| CVE-2026-102607 | 16 Oct 2026 | CVSS 8.8 | zoneminderZoneMinder is a free, open source closed-circuit television software application. Prior to 1.38.3, the exportEvents() function concatenates the… | |
| CVE-2026-102608 | 16 Oct 2026 | CVSS 9.0 | zoneminderZoneMinder is a free, open source closed-circuit television software application. Prior to 1.38.3, downloadEvents() manually wraps a monitor Name… | |
| CVE-2026-104198 | 15 Oct 2026 | CVSS 5.3 | zoneminderZoneMinder is a free, open source closed-circuit television software application. In versions 1.34.0 through 1.36.38, the web interface mishandles… | |
| CVE-2026-102296 | 28 Sep 2026 | CVSS 6.5 | zoneminderZoneMinder before 1.38.4 contains static buffer overflow vulnerabilities in RemoteCameraHttp::GetResponse() that allow malicious HTTP cameras or… | |
| CVE-2026-102297 | 28 Sep 2026 | CVSS 4.3 | zoneminderZoneMinder before 1.38.4 fails to apply per-monitor access restrictions in the FramesController index endpoint. Authenticated users with Events view… | |
| CVE-2024-58386 | 28 Sep 2026 | CVSS 6.5 | zoneminderZoneMinder versions 1.37.0 before 1.38.0 contain a path traversal vulnerability in the files view that allows authenticated users to read arbitrary… |