Threats tagged 'ghsa-m78q-27gx-3rwr'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.8%	CVE-2026-67827ZLMediaKit commit · Incorrect Access Control Critical9.8EPSS 0.8%2026-09-21GCVE DatabaseCVE-2026-67827 An incorrect access control vulnerability in the HTTP API module of ZLMediaKit (commit 9fd5152) allows unauthenticated remote attackers to execute arbitrary shell commands. This is achieved by accessing the setServerConfig API endpoint to overwrite the ffmpeg.snap configuration parameter, which is then executed with the privileges of the ZLMediaKit process via the getSnap API endpoint. EPSS 0.8%Report on CVE-2026-67827 Vulnerability CWE-94 #ghsa-m78q-27gx-3rwr	GCVE Database	2026-09-21

Page 1 of 1