CVE-2016-10206

8.8 highEPSS 0.7%

High (8.8) in zoneminder zoneminder. EPSS 0.7% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in Zoneminder 1.30 and earlier allows remote attackers to hijack the authentication of users for requests that change passwords and possibly have unspecified other impact as demonstrated by a crafted user action request to index.php.

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 52% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2017-03-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

zoneminder:zoneminder

References

http://www.openwall.com/lists/oss-security/2017/02/05/1
http://www.securityfocus.com/bid/97114
https://www.foxmole.com/advisories/foxmole-2016-07-05.txt
http://www.openwall.com/lists/oss-security/2017/02/05/1
http://www.securityfocus.com/bid/97114

Check your stack JSON