CVE-2023-31493

6.6 mediumEPSS 0.5%

Medium (6.6) in zoneminder zoneminder. EPSS 0.5% chance of exploitation in the next 30 days.

RCE (Remote Code Execution) exists in ZoneMinder through 1.36.33 as an attacker can create a new .php log file in language folder, while executing a crafted payload and escalate privileges allowing execution of any commands on the remote system.

Severity

CVSS 3.1

6.6 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 42% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2024-10-15
Modified: 2026-07-05
Record from: the NVD, synced 2026-10-19

Affected

zoneminder:zoneminder

References

https://medium.com/@dk50u1/rce-remote-code-execution-in-zoneminder-up-to-1-36-33-0686f5bcd370

Check your stack JSON