CVE-2026-102607 | ZoneMinder up to 1.38.2 Event Export web/ajax/event.php exportEvents exportFile os command injection

October 16, 2026 Yanac

A vulnerability has been found in ZoneMinder up to 1.38.2 and classified as problematic. This vulnerability affects the function exportEvents of the file web/ajax/event.php of the component Event Export. This manipulation of the argument exportFile causes os command injection.

This vulnerability is handled as CVE-2026-102607. The attack can be initiated remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More