Beveiligingsadvies

CVE-2026-76060

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-27 20:29:05

Laatst bijgewerkt 2026-08-28 15:58:01

Toegewezen door icscert

CVSS-score 8.8

Status PUBLISHED

Beschrijving

An authenticated OS command injection vulnerability exists in ZoneMinder's event export functionality. The exportFile HTTP request parameter is passed unsanitized into a shell command executed via PHP's exec(), allowing any authenticated user with View Events permission to execute arbitrary operating system commands on the server.

← Alle CVE's bekijken Bekijk op cve.org ↗