Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
ZoneMinder is a free, open source closed-circuit television software application. In versions 1.36.37 and below and 1.37.61 through 1.38.0, there is a second-order SQL Injection vulnerability in the web/ajax/status.php file within the getNearEvents() function. Event field values (specifically Name and Cause) are stored safely via parameterized queries but are later retrieved and concatenated directly into SQL WHERE clauses without escaping. An authenticated user with Events edit and view permissions can exploit this to execute arbitrary SQL queries.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-06 | 1 | Disclosure1 |
| 2026-03-10 | 1 | General1 |
| 2026-03-23 | 1 | General1 |
CVE 8.8 ZoneMinder a webcam sistem SQLinjection discovered by me. https://www.cve.org/CVERecord?id=CVE-2026-27470
Post summary
A new CVE-2026-27470, identifying an SQL injection in ZoneMinder, was discovered and publicly referenced with minimal additional details.
@rez0__ I should to do a video of my 3 CVEs with a Bugtraceai framework for 2 dollars run. Wallos High: https://www.cve.org/CVERecord?id=CVE-2026-27479 ZoneMinder High: https://www.cve.org/CVERecord?id=CVE-2026-27470 Piwigo Medium: https://www.cve.org/CVERecord?id=CVE-2026-27834
Post summary
The user plans to create a video on three CVEs, citing only their identifiers and a framework name, without providing technical details, PoC, exploits, or patch information.
@carlosazaustre Y donde han puesto los CVEs que encontraron? yo te paso los que encontré con BugTraceAI Wallos - High https://www.cve.org/CVERecord?id=CVE-2026-27479 ZoneMinder - High https://www.cve.org/CVERecord?id=CVE-2026-27470 Piwigo (Pendiente de Disclosure) - High CVE-2026-27834
Post summary
The user lists several CVE IDs identified by BugTraceAI and links to their CVE.org pages, noting each as 'High' severity without providing further technical detail or evidence of exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | zoneminder | zoneminder | - | - | - |