Zoneminder

A critical Remote Code Execution (RCE) vulnerability exists in Zoneminder versions 1.37.48 and 1.38.3, allowing authenticated users to execute arbitrary operating system commands. The vulnerability stems from an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') flaw within the e…