PatchTheCVEzoneminder vulnerabilities
Recent CVEs affecting zoneminder products. 7 tracked.
zoneminder has 7 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 7. Most recent: 2026-02-21. Highest priority: CVE-2024-43360 (score 68/100).
- CVE-2023-31493 MEDIUM 6.6 UPGRADE RCE (Remote Code Execution) exists in ZoneMinder through 1.36.33 as an attacker can create a new .php log file
- CVE-2026-27470 HIGH 8.8 UPGRADE ZoneMinder is a free, open source closed-circuit television software application
- CVE-2025-65791 CRITICAL 9.8 DOWNGRADE ZoneMinder v1.36.34 is vulnerable to Command Injection in web/views/image.php
- CVE-2024-43360 CRITICAL 9.8 UPGRADE ZoneMinder is a free, open source closed-circuit television software application
- CVE-2024-43359 NONE 0.0 UPGRADE ZoneMinder is a free, open source closed-circuit television software application
- CVE-2024-43358 MEDIUM 6.1 UPGRADE ZoneMinder is a free, open source closed-circuit television software application
- CVE-2023-41884 HIGH 7.1 UPGRADE ZoneMinder is a free, open source Closed-circuit television software application
FAQ
How do I fix zoneminder vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is zoneminder being exploited right now?
None of the tracked zoneminder CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which zoneminder CVE should I patch first?
CVE-2024-43360 currently ranks highest (68/100): ZoneMinder is a free, open source closed-circuit television software application.