Z
Vendor security profile
zoneminder
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs8
Critical0
CISA KEV0
Public exploit4
Patch rate%38
Avg. CVSS7.1
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
2
4
1
CVE KEV
CVE severity distribution
8toplam CVE
High4 (50%)
Medium4 (50%)
Patch and exploitation view
%38
Verified patch
%0
CISA KEV
%50
Public exploit
3Patch available
0Partial
0Workaround
0Vendor: no patch
5Unknown
Latest vulnerabilities
5.3
CVE-2026-104198
ZoneMinder failed token handling bypasses web authentication
Z
Patch status unknown
5.3
CVE-2026-102297
ZoneMinder before 1.38.4 Incorrect Authorization in frames API index
Z
Patch verifiedEPSS %0
8.3
CVE-2026-102296
ZoneMinder before 1.38.4 Buffer Overflow via HTTP Camera Response
Z
Patch verifiedEPSS %0
7.1
CVE-2024-58386
ZoneMinder 1.37.x Path Traversal via files view
Z
Patch verifiedEPSS %0
6.5
CVE-2026-54258
Cross-monitor event media authorization bypass in direct event media endpoints
Z
Patch status unknownEPSS %0
8.8
CVE-2026-76060
OS Command Injection in PayRange API
Z
Patch status unknownEPSS %2
8.8
CVE-2026-72556
ZoneMinder ZoneMinder - Remote Code Execution
Z
Patch status unknownEPSS %1
6.6
CVE-2023-31493
Code injection in Zoneminder
Z
Patch status unknownEPSS %0