CVE WATCH / VULNERABILITY DETAIL
CVE-2026-104198
MEDIUMCVSS 5.3NVD feed
Published 15 October 2026 · tracked since 16 October 2026
Description
ZoneMinder is a free, open source closed-circuit television software application. In versions 1.34.0 through 1.36.38, the web interface mishandles failed token authentication in web/includes/auth.php. validateToken() returns false when a token is malformed or has an invalid signature, but the caller
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2025-61624
- CVE-2026-111284 MEDIUM 5.4
- CVE-2026-110917 MEDIUM 4.3
- CVE-2026-110919 HIGH 8.8
- CVE-2026-110920 HIGH 8.8
- CVE-2026-110921 HIGH 8.8
- CVE-2026-110922 HIGH 8.8
- CVE-2026-110913 HIGH 8.8
- CVE-2026-110914 HIGH 8.8
- CVE-2026-110915 HIGH 8.8