CVE-2026-102296
ZoneMinder before 1.38.4 contains static buffer overflow vulnerabilities in RemoteCameraHttp::GetResponse() that allow malicious HTTP camera
CVSS
6.5
Medium
EPSS
0.4%
p38
KEV
—
Exploit Today
11
0-100
Published: Sep 28, 2026 · Last modified: Sep 29, 2026 · CWE-120
0.4%EPSS · 30 days0.4%
2026-09-292026-10-25
ZoneMinder before 1.38.4 contains static buffer overflow vulnerabilities in RemoteCameraHttp::GetResponse() that allow malicious HTTP cameras or intercepting attackers to overflow fixed-size buffers by sending oversized response headers. Attackers can send crafted HTTP responses with oversized status messages, Connection headers, Content-Type values, or multipart boundaries to corrupt parser state and crash the capture process or corrupt memory.
- github.comhttps://github.com/ZoneMinder/zoneminder
- github.comhttps://github.com/ZoneMinder/zoneminder/blob/1.38.3/src/zm_remote_camera_http.cpp#L736
- github.comhttps://github.com/ZoneMinder/zoneminder/commit/2596e5fb64c0348e615577b0ab08dc38b6dc6ed8
- github.comhttps://github.com/ZoneMinder/zoneminder/commit/813bf6f1a3ffc92c163352f2480477ba571fca5b
- github.comhttps://github.com/ZoneMinder/zoneminder/releases/tag/1.38.4
- github.comhttps://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-93j4-rcp9-9jx6
- www.vulncheck.comhttps://www.vulncheck.com/advisories/zoneminder-before-1.38.4-buffer-overflow-via-http-camera-response
- github.comhttps://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-93j4-rcp9-9jx6
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-1142689.9 CRI43.3%
——13A flaw has been found in Tenda BE3L Pro 16.03.60.62. Affected by this vulnerability is the function formWifiBasicSet of the file /goform/WifiBasicSet. This manipulation of the argument security_5g causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been published and may be used.4dCVE-2026-1011035.5 MED2.0%
——1The PEAK-System PCAN diagnostic call did not validate that the caller-supplied output buffer was large enough to hold the output record.5dCVE-2026-43837—37.0%
——11A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentication to achieve code execution.5dCVE-2026-118296.5 MED14.9%
——4IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of offset values in MQOPEN requests.2dCVE-2026-118285.9 MED16.7%
——5IBM MQ could allow a remote attacker with queue manager control or man-in-the-middle access on unencrypted channels to cause a denial of service in client applications using asynchronous message consumption due to improper validation of queue name length values.3dCVE-2026-1121086.3 MED18.7%
——6A vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. This impacts the function GGUFBuffer::ReadString of the file third_party/gguf/gguf.cpp of the component String Parsing. This manipulation of the argument len causes buffer overflow. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.4d