Skip to content
Threat Feed
Subscribe

Product

ZoneMinder (< 1.38.3)

1 brief RSS
high advisory

ZoneMinder Authenticated OS Command Injection via Monitor Name

An authenticated OS command injection vulnerability (CVE-2026-102608) in ZoneMinder versions prior to 1.38.3 allows remote code execution via unsanitized monitor names during event export operations.

ZoneMinder command-injection vulnerability remote-code-execution surveillance
1r 1t 1c