CVE-2026-102608 | ZoneMinder up to 1.38.2 Event Export downloadEvents Name os command injection

October 16, 2026 Yanac

A vulnerability was found in ZoneMinder up to 1.38.2 and classified as problematic. This issue affects the function downloadEvents of the component Event Export. Such manipulation of the argument Name leads to os command injection.

This vulnerability is uniquely identified as CVE-2026-102608. The attack can be launched remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More