https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T16:30:19.123095+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-221504 EUVD-2026-221504 2026-10-23T16:30:19.188443+00:00 EUVD-2026-221504 https://cve.radiocsirt.org/vuln/fkie_cve-2023-26039 fkie_cve-2023-26039 2026-10-23T16:30:19.188484+00:00

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 contain an OS Command Injection via daemonControl() in (/web/api/app/Controller/HostController.php). Any authenticated user can construct an api command to execute any shell command as the web user. This issue is patched in versions 1.36.33 and 1.37.33.

 https://cve.radiocsirt.org/vuln/gsd-2023-26039 gsd-2023-26039 2026-10-23T16:30:19.188518+00:00 gsd-2023-26039 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-26039 UBUNTU-CVE-2023-26039 2026-10-23T16:30:19.188531+00:00

Affected: Ubuntu:Pro:16.04:LTS: zoneminder, Ubuntu:Pro:20.04:LTS: zoneminder, Ubuntu:Pro:22.04:LTS: zoneminder, Ubuntu:24.04:LTS: zoneminder, Ubuntu:25.10: zoneminder, Ubuntu:26.10: zoneminder, Ubuntu:26.04:LTS: zoneminder

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 contain an OS Command Injection via daemonControl() in (/web/api/app/Controller/HostController.php). Any authenticated user can construct an api command to execute any shell command as the web user. This issue is patched in versions 1.36.33 and 1.37.33.