Regulatory

CISA warns of ZoneMinder flaw that could let authenticated users run commands

Atlas Watchline · August 25, 2026

Key facts

What happened

CISA published an advisory for ZoneMinder on 2026-08-25

Key facts

Why it matters

The advisory concerns CVE-2026-76060

Key facts

The details

The vulnerability is an authenticated OS command injection in ZoneMinder’s event export functionality

Atlas Watchline

Read the full report

CISA said a ZoneMinder vulnerability could let an authenticated user with View Events permission run operating…

Read on Atlas Watchline

Read on Atlas Watchline