CVE ID :CVE-2026-102608 Published : Oct. 16, 2026, 8:17 p.m. | 1 hour, 17 minutes ago Description :ZoneMinder is a free, open source closed-circuit television software application. Prior to 1.38.3, downloadEvents() manually wraps a monitor Name value in single quotes instead of using...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-102608 - ZoneMinder: Authenticated OS Command Injection via unsanitized Monitor Name in event export (download_functions.php)

VERWANDTEARTIKEL

CVE-2026-96620 - Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Execution

CVE-2026-30971 - ZoneMinder: Authenticated RCE via command injection in monitor Device Path

CVE-2026-61726 - Tandoor Recipes: Private recipe authorization bypass via /api/step/ - read and modify another Space member's private recipe content

CVE-2026-102607 - ZoneMinder: Authenticated OS Command Injection (RCE) via Export Feature

Critical BlockStrap flaw lets hackers run code on Magento servers

CVE-2026-111719 - Roncoo-pay through commit 9428382 Information Disclosure via /f2fPay/order/query