As cited
Copy frozen at (site build).
vulnerabilities
Zoneminder
No summary had been written when this copy was frozen.
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Zoneminder
CVE-2026-76060 is an authenticated OS command injection vulnerability in ZoneMinder's event export functionality that allows users with View Events permission to execute arbitrary operating system commands via unsanitized input to the exportFile parameter. Affected versions are 1.37.48 and 1.38.3, with a CVSS base score of 8.8. ZoneMinder recommends upgrading to version 1.38.3 or later.
Why it matters: Organizations running ZoneMinder for surveillance and video management must patch immediately, as any authenticated user with View Events permission can gain remote code execution on the server.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Zoneminder
CVE-2026-76060 is an authenticated OS command injection vulnerability in ZoneMinder's event export functionality that allows users with View Events permission to execute arbitrary operating system commands via unsanitized input to the exportFile parameter. Affected versions are 1.37.48 and 1.38.3, with a CVSS base score of 8.8. ZoneMinder recommends upgrading to version 1.38.3 or later.
Why it matters: Organizations running ZoneMinder for surveillance and video management must patch immediately, as any authenticated user with View Events permission can gain remote code execution on the server.
- Source published
- First seen by Cybersecurity Tracker