rishavand1/CVE-2025-65791

rishavand1/CVE-2025-65791

GitHubGitHub
GitHubgithub.com
Releases0
CVE-2025-65791 — Command Injection in ZoneMinder
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2025-65791↗
9.8 CRITICAL—

ZoneMinder v1.36.34 is vulnerable to Command Injection in web/views/image.php. The application passes unsanitized user input directly to the exec() function. NOTE: this is disputed by the Supplier because there is no unsanitized user input to web/views/image.php.