EUVD-2026-76752Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Low-privileged authenticated account required (PR:L); confidentiality impact is high (private video); no integrity or availability impact applies.
Primary rating from Vendor (github).
CVSS VectorVendor: github
Lifecycle Timeline
3DescriptionCVE.org
ZoneMinder is a free, open source closed-circuit television software application. Versions prior to 1.36.39, 1.38.4, and 1.39.11 allow an authenticated low-privileged user with coarse Events=View and/or Snapshots=View permissions to directly fetch media for events belonging to monitors they are not allowed to access. The normal UI correctly hides the restricted monitor and its events, but direct event media views accept an arbitrary eid and stream media from the event path without enforcing the event/monitor-level ACL. This exposes private surveillance footage across monitor boundaries. Versions 1.36.39, 1.38.4, and 1.39.11 fix the issue.
AnalysisAI
Authenticated low-privileged users in ZoneMinder prior to versions 1.36.39, 1.38.4, and 1.39.11 can bypass monitor-level access controls to retrieve private surveillance footage from cameras they are not authorized to access. The event media endpoints accept an arbitrary event ID parameter without enforcing the per-monitor ACL that the UI correctly applies, creating a server-side IDOR (CWE-639) condition. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an active ZoneMinder account with at least the Events=View or Snapshots=View coarse-grained permission assigned - unauthenticated access is not possible. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 6.5 score with vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N is well-calibrated to the actual risk: the attack is network-reachable, requires low complexity, and yields high confidentiality impact through exposure of private surveillance footage. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade ZoneMinder to version 1.36.39, 1.38.4, or 1.39.11, depending on the installed branch, as documented in GitHub Security Advisory GHSA-vj5r-pc2v-gfwv. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Share
External POC / Exploit Code
Leaving vuln.today