agentprime: zoneminderEvery new CVE for zoneminder.https://agentprime.io/CVE-2026-30971: ZoneMinder: Authenticated RCE via command injection in monitor Device Pathhttps://agentprime.io/advisories/CVE-2026-30971/https://agentprime.io/advisories/CVE-2026-30971/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 19:40:51 GMTCVECVE-2026-102608: ZoneMinder: Authenticated OS Command Injection via unsanitized Monitor Name in event export (download_functions.php)https://agentprime.io/advisories/CVE-2026-102608/https://agentprime.io/advisories/CVE-2026-102608/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 19:35:36 GMTCVEcriticalCVE-2026-102607: ZoneMinder: Authenticated OS Command Injection (RCE) via Export Featurehttps://agentprime.io/advisories/CVE-2026-102607/https://agentprime.io/advisories/CVE-2026-102607/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 19:29:58 GMTCVECVE-2026-104198: ZoneMinder failed token handling bypasses web authenticationhttps://agentprime.io/advisories/CVE-2026-104198/https://agentprime.io/advisories/CVE-2026-104198/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 19:48:52 GMTCVECVE-2026-102297: ZoneMinder before 1.38.4 Incorrect Authorization in frames API indexhttps://agentprime.io/advisories/CVE-2026-102297/https://agentprime.io/advisories/CVE-2026-102297/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 22:00:19 GMTCVECVE-2026-102296: ZoneMinder before 1.38.4 Buffer Overflow via HTTP Camera Responsehttps://agentprime.io/advisories/CVE-2026-102296/https://agentprime.io/advisories/CVE-2026-102296/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 22:00:19 GMTCVECVE-2024-58386: ZoneMinder 1.37.x Path Traversal via files viewhttps://agentprime.io/advisories/CVE-2024-58386/https://agentprime.io/advisories/CVE-2024-58386/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 22:00:16 GMTCVECVE-2026-54258: Cross-monitor event media authorization bypass in direct event media endpointshttps://agentprime.io/advisories/CVE-2026-54258/https://agentprime.io/advisories/CVE-2026-54258/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 11 Sep 2026 21:31:30 GMTCVECVE-2026-76060: OS Command Injection in PayRange APIhttps://agentprime.io/advisories/CVE-2026-76060/https://agentprime.io/advisories/CVE-2026-76060/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Aug 2026 20:29:05 GMTCVECVE-2026-72556: ZoneMinder ZoneMinder - Remote Code Executionhttps://agentprime.io/advisories/CVE-2026-72556/https://agentprime.io/advisories/CVE-2026-72556/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 11:11:40 GMTCVECVE-2026-27470: ZoneMinder: Second-Order SQL Injection in `getNearEvents()` via Stored Event Name and Cause Fieldshttps://agentprime.io/advisories/CVE-2026-27470/https://agentprime.io/advisories/CVE-2026-27470/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 21 Feb 2026 08:05:01 GMTCVECVE-2024-51482: Boolean-based SQL Injection in ZoneMinder v1.37.* <= 1.37.64https://agentprime.io/advisories/CVE-2024-51482/https://agentprime.io/advisories/CVE-2024-51482/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. CVSS score 10.0 (7.0 or more) and EPSS 0.37 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Thu, 31 Oct 2024 18:07:25 GMTCVEcriticalCVE-2024-43360: ZoneMinder Time-based SQL Injectionhttps://agentprime.io/advisories/CVE-2024-43360/https://agentprime.io/advisories/CVE-2024-43360/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Aug 2024 20:55:14 GMTCVEcriticalCVE-2024-43359: XSS vulnerabilities in montagereviewhttps://agentprime.io/advisories/CVE-2024-43359/https://agentprime.io/advisories/CVE-2024-43359/CVSS 0.0 (None). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Aug 2024 20:49:28 GMTCVECVE-2024-43358: XSS vulnerability in filter viewhttps://agentprime.io/advisories/CVE-2024-43358/https://agentprime.io/advisories/CVE-2024-43358/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Aug 2024 20:46:59 GMTCVECVE-2023-41884: ZoneMinder Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in watch.phphttps://agentprime.io/advisories/CVE-2023-41884/https://agentprime.io/advisories/CVE-2023-41884/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Aug 2024 19:39:34 GMTCVECVE-2023-26039: ZoneMinder vulnerable to OS Command injection in daemonControl() APIhttps://agentprime.io/advisories/CVE-2023-26039/https://agentprime.io/advisories/CVE-2023-26039/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 25 Feb 2023 01:31:36 GMTCVECVE-2023-26038: ZoneMinder contains Local File Inclusion vulnerability via `web/ajax/modal.php`https://agentprime.io/advisories/CVE-2023-26038/https://agentprime.io/advisories/CVE-2023-26038/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 25 Feb 2023 01:27:39 GMTCVECVE-2023-26037: ZoneMinder contains SQL Injection via report_event_audithttps://agentprime.io/advisories/CVE-2023-26037/https://agentprime.io/advisories/CVE-2023-26037/CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 25 Feb 2023 01:18:41 GMTCVECVE-2023-26036: ZoneMinder contains Local File Inclusion vulnerabilityhttps://agentprime.io/advisories/CVE-2023-26036/https://agentprime.io/advisories/CVE-2023-26036/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 25 Feb 2023 01:13:30 GMTCVECVE-2023-26035: ZoneMinder vulnerable to Missing Authorizationhttps://agentprime.io/advisories/CVE-2023-26035/https://agentprime.io/advisories/CVE-2023-26035/CVSS 7.2 (High). Critical: CVSS score 7.2 (7.0 or more) and EPSS 0.80 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Sat, 25 Feb 2023 01:07:01 GMTCVEcriticalCVE-2023-26034: ZoneMinder SQL Injectionhttps://agentprime.io/advisories/CVE-2023-26034/https://agentprime.io/advisories/CVE-2023-26034/CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sat, 25 Feb 2023 00:58:47 GMTCVEcriticalCVE-2023-26032: ZoneMinder contains SQL injection via malicious Jason Web Tokenhttps://agentprime.io/advisories/CVE-2023-26032/https://agentprime.io/advisories/CVE-2023-26032/CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 25 Feb 2023 00:55:28 GMTCVECVE-2023-25825: ZoneMinder contains Cross-site Scripting via log viewinghttps://agentprime.io/advisories/CVE-2023-25825/https://agentprime.io/advisories/CVE-2023-25825/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 25 Feb 2023 00:44:25 GMTCVECVE-2022-39291: Denial of service through logs in zoneminderhttps://agentprime.io/advisories/CVE-2022-39291/https://agentprime.io/advisories/CVE-2022-39291/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 07 Oct 2022 00:00:00 GMTCVECVE-2022-39290: CSRF key bypass using HTTP methods in zoneminderhttps://agentprime.io/advisories/CVE-2022-39290/https://agentprime.io/advisories/CVE-2022-39290/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 07 Oct 2022 00:00:00 GMTCVECVE-2022-39289: Database log access in ZoneMinderhttps://agentprime.io/advisories/CVE-2022-39289/https://agentprime.io/advisories/CVE-2022-39289/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 07 Oct 2022 00:00:00 GMTCVEcriticalCVE-2022-39285: Stored Cross-Site Scripting Vulnerability In File Parameter in zoneminderhttps://agentprime.io/advisories/CVE-2022-39285/https://agentprime.io/advisories/CVE-2022-39285/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 07 Oct 2022 00:00:00 GMTCVE