PT-2026-21370 · Unknown · Zoneminder

Acorzo1983 · Publicado 2026-01-01 · Atualizado 2026-02-21 · CVE-2026-27470

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ZoneMinder versions 1.36.37 and below ZoneMinder versions 1.37.61 through 1.38.0

Description ZoneMinder is a free, open source closed-circuit television software application. A second-order SQL Injection issue exists in the web/ajax/status.php file within the getNearEvents() function. Event field values, specifically Name and Cause, are initially stored securely using parameterized queries. However, these values are later retrieved and directly concatenated into SQL WHERE clauses without proper escaping, allowing for potential exploitation. An authenticated user with Events edit and view permissions can leverage this to execute arbitrary SQL queries.

Recommendations ZoneMinder versions 1.36.37 and below: At the moment, there is no information about a newer version that contains a fix for this vulnerability. ZoneMinder versions 1.37.61 through 1.38.0: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2026-27470

GHSA-R6GM-478G-F2C4

Produtos afetados

Zoneminder

Referências · 18

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/27xxx/CVE-2026-27470.json · Exploit
• https://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-r6gm-478g-f2c4 · Aviso do Fabricante
• https://github.com/ZoneMinder/zoneminder/releases/tag/1.38.1 · Nota
• https://github.com/ZoneMinder/zoneminder/releases/tag/1.36.38 · Nota
• https://ubuntu.com/security/CVE-2026-27470 · Aviso do Fabricante
• https://owasp.org/www-community/attacks/SQL_Injection · Nota
• https://cve.org/CVERecord?id=CVE-2026-27470 · Nota de Segurança
• https://twitter.com/CveTodo/status/2025125484351132080 · Publicação no Twitter
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-27470 · Aviso do Fabricante
• https://t.me/CVEtracker/45366 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2026-27470 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2025154169913373140 · Publicação no Twitter
• https://security-tracker.debian.org/tracker/CVE-2026-27470 · Aviso do Fabricante
• https://twitter.com/TheHackerWire/status/2025122509448958415 · Publicação no Twitter
• https://t.me/cveNotify/152710 · Publicação no Telegram