ZoneMinder vulnerabilities

CVEs per yearBy the year they were published

1. 20224
2. 20238
3. 20245
4. 202611

Newest CVEs

• CVE-2026-30971

  ZoneMinder: Authenticated RCE via command injection in monitor Device Path

  ZoneMinder · zoneminder

  High8.8
• CVE-2026-102608

  ZoneMinder: Authenticated OS Command Injection via unsanitized Monitor Name in event export (download_functions.php)

  ZoneMinder · zoneminder

  Critical9.0
• CVE-2026-102607

  ZoneMinder: Authenticated OS Command Injection (RCE) via Export Feature

  ZoneMinder · zoneminder

  High8.8
• CVE-2026-104198

  ZoneMinder failed token handling bypasses web authentication

  ZoneMinder · zoneminder

  Medium5.3
• CVE-2026-102297

  ZoneMinder before 1.38.4 Incorrect Authorization in frames API index

  ZoneMinder · zoneminder

  Medium5.3
• CVE-2026-102296

  ZoneMinder before 1.38.4 Buffer Overflow via HTTP Camera Response

  ZoneMinder · zoneminder

  High8.3
• CVE-2024-58386

  ZoneMinder 1.37.x Path Traversal via files view

  ZoneMinder · zoneminder

  High7.1
• CVE-2026-54258

  Cross-monitor event media authorization bypass in direct event media endpoints

  ZoneMinder · zoneminder

  Medium6.5
• CVE-2026-76060

  OS Command Injection in PayRange API

  Zoneminder · Zoneminder

  High8.7
• CVE-2026-72556

  ZoneMinder ZoneMinder - Remote Code Execution

  ZoneMinder · ZoneMinder

  High8.8