Known vulnerabilities in ZoneMinder 1.38.6

Vendor: ZoneMinder.com
Software: ZoneMinder
Version: 1.38.6
Software CPE: cpe:2.3:a:zoneminder_com:zoneminder:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting ZoneMinder version 1.38.6 ZoneMinder 1.38.6 is affected by 2 vulnerabilities: 1 high, 1 low Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU158955 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
 CWE-78 High
No
No
 - 03.11.2026 SB2026110388
#VU158947 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
 CWE-89 Low
No
No
 1.39.11 03.11.2026 SB2026060474