Is CVE-2026-102296 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-102296 being exploited in the wild.

How severe is CVE-2026-102296?

Medium severity, with a CVSS score of 6.5, published 28 September 2026.

Is there a fix for CVE-2026-102296?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-102296 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-102296?

Check whether you run Zoneminder at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-102296: ZoneMinder static buffer overflow in RemoteCameraHttp

CVE-2026-102296 · Severity: medium · CVSS 6.5 · Published 2026-09-28

ZoneMinder is an open-source video surveillance and monitoring system that manages IP camera feeds. A flaw in its HTTP camera response handler allows malicious cameras or network attackers to send specially crafted HTTP headers that exceed expected buffer sizes, causing the capture process to crash or potentially execute unauthorized code. An attacker with network access to a ZoneMinder system could disrupt monitoring by crashing the camera capture threads or corrupt system memory.

Technologies: Zoneminder. Vendors: Zoneminder.

Quick answers

Is CVE-2026-102296 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-102296 being exploited in the wild.
How severe is CVE-2026-102296?: Medium severity, with a CVSS score of 6.5, published 28 September 2026.
Which products and versions are affected?: Zoneminder before 1.38.4.
Is there a fix for CVE-2026-102296?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-102296 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-102296?: Check whether you run Zoneminder at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The GetResponse() method in RemoteCameraHttp uses fixed-size buffers to parse HTTP response headers without proper bounds checking. An attacker can send oversized status messages, Connection headers, Content-Type values, or multipart boundary declarations to overflow these buffers. The vulnerability requires network access to the camera connection (either by compromising a camera or via man-in-the-middle interception) and results in denial of service or potential code execution through memory corruption.

Affected products

ZoneMinder ZoneMinder before 1.38.4

Timeline

2026-09-28: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.