CVE-2026-104198 | ZoneMinder up to 1.36.62 Token Authentication web/includes/auth.php validateToken user information disclosure

SecurityVulns
Yanac

A vulnerability labeled as problematic has been found in ZoneMinder up to 1.36.62. Affected is the function validateToken of the file web/includes/auth.php of the component Token Authentication. Executing a manipulation of the argument User can lead to information disclosure.

This vulnerability is tracked as CVE-2026-104198. The attack can be launched remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More