CVE-2026-30971 | ZoneMinder up to 1.36.39/1.38.1/1.39.1 Monitor Creation zmdc.pl qx Device os command injection

October 16, 2026 Yanac

A vulnerability was found in ZoneMinder up to 1.36.39/1.38.1/1.39.1. It has been classified as very critical. Impacted is the function qx of the file zmdc.pl of the component Monitor Creation. Performing a manipulation of the argument Device results in os command injection.

This vulnerability was named CVE-2026-30971. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More