{"metadata": {"vulnerability": "CVE-2023-26035", "count": 37, "kinds": {"milestone": 5, "sighting": 23, "kev": 0, "other": 9}}, "data": [{"timestamp": "2023-02-17T22:44:03.148Z", "date_only": false, "value": "2023-02-17T22:44:03.148Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-26035", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-02-25T01:07:01.906Z", "date_only": false, "value": "2023-02-25T01:07:01.906Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-26035", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-02-25T02:15:00Z", "date_only": false, "value": "2023-02-25T02:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2023-26035", "record": "UBUNTU-CVE-2023-26035", "field": "published"}, {"timestamp": "2023-02-25T02:15:00Z", "date_only": false, "value": "2023-02-25T02:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-26035", "record": "GSD-2023-26035", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-02-25T02:15:13.550Z", "date_only": false, "value": "2023-02-25T02:15:13.550", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-26035", "record": "FKIE_CVE-2023-26035", "field": "published"}, {"timestamp": "2023-11-10T20:44:04Z", "date_only": false, "value": "2023-11-10T20:44:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/zoneminder_snapshots.rb", "record": "CVE-2023-26035", "field": "creation_timestamp", "uuid": "1a11a5dd-a8c9-43a3-aa1b-2e21121bc8da", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/zoneminder_snapshots.rb"}, {"timestamp": "2023-11-14T03:07:28.812Z", "date_only": false, "value": "2023-11-14T03:07:28.812Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2023-26035", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-11-14T03:15:00Z", "date_only": false, "value": "2023-11-14T03:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-26035", "record": "GSD-2023-26035", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-12-04T19:09:06Z", "date_only": false, "value": "2023-12-04T19:09:06Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2023-AS34696", "record": "CLEANSTART-2023-AS34696", "field": "modified"}, {"timestamp": "2023-12-11T20:34:28Z", "date_only": false, "value": "2023-12-11T20:34:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/6140", "record": "CVE-2023-26035", "field": "creation_timestamp", "uuid": "6a1215cf-c739-4bdf-81f4-abc1d965ab57", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aUnauthenticated RCE in ZoneMinder Snapshots\nURL\uff1ahttps://github.com/rvizx/CVE-2023-26035\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/6140"}, {"timestamp": "2023-12-12T11:37:39Z", "date_only": false, "value": "2023-12-12T11:37:39.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1802", "record": "CVE-2023-26035", "field": "creation_timestamp", "uuid": "82d75a7f-59ce-419c-9e98-c30c3056ba69", "content": "#ExploitObserverAlert\n\nCVE-2023-26035\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-26035. ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 are vulnerable to Unauthenticated Remote Code Execution via Missing Authorization. There are no permissions check on the snapshot action, which expects an id to fetch an existing monitor but can be passed an object to create a new one instead. TriggerOn ends up calling shell_exec using the supplied Id. This issue is fixed in This issue is fixed in versions 1.36.33 and 1.37.33.\n\nFIRST-EPSS: 0.134140000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/1802"}, {"timestamp": "2023-12-12T14:49:32Z", "date_only": false, "value": "2023-12-12T14:49:32.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/6150", "record": "CVE-2023-26035", "field": "creation_timestamp", "uuid": "be59aa33-914b-4fb2-ade3-3ef41ebc6589", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aThis is a script written in Python that allows the exploitation of the Zoneminder's security flaw in the described in CVE-2023-26035. \nURL\uff1ahttps://github.com/m3m0o/zoneminder-snapshots-rce\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/6150"}, {"timestamp": "2023-12-13T01:20:53.434Z", "date_only": false, "value": "2023-12-13T01:20:53.434700Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-26035", "record": "GSD-2023-26035", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-13T15:51:46Z", "date_only": false, "value": "2023-12-13T15:51:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/6171", "record": "CVE-2023-26035", "field": "creation_timestamp", "uuid": "35d130af-6c4b-4115-aa8b-3ba550153be9", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aPOC script for CVE-2023-26035 (zoneminder 1.36.32) \nURL\uff1ahttps://github.com/heapbytes/CVE-2023-26035\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/6171"}, {"timestamp": "2023-12-16T15:47:06Z", "date_only": false, "value": "2023-12-16T15:47:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1836", "record": "CVE-2023-26035", "field": "creation_timestamp", "uuid": "76eae550-f92e-42c1-9188-2529638b8a0b", "content": "#ExploitObserverAlert\n\nCVE-2023-26035\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-26035. ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 are vulnerable to Unauthenticated Remote Code Execution via Missing Authorization. There are no permissions check on the snapshot action, which expects an id to fetch an existing monitor but can be passed an object to create a new one instead. TriggerOn ends up calling shell_exec using the supplied Id. This issue is fixed in This issue is fixed in versions 1.36.33 and 1.37.33.\n\nFIRST-EPSS: 0.104040000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/1836"}, {"timestamp": "2023-12-20T13:19:25Z", "date_only": false, "value": "2023-12-20T13:19:25.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/1729", "record": "CVE-2023-26035", "field": "creation_timestamp", "uuid": "ca11bae6-9012-4be2-9d38-ea30b6ec63c9", "content": "https://github.com/rvizx/CVE-2023-26035\n\nUnauthenticated RCE in ZoneMinder Snapshots - Poc Exploit\n#github  #exploit", "url": "https://t.me/CNArsenal/1729"}, {"timestamp": "2023-12-20T13:43:29Z", "date_only": false, "value": "2023-12-20T13:43:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/3700", "record": "CVE-2023-26035", "field": "creation_timestamp", "uuid": "bd2e3355-8ec7-4da7-9089-802ef5c79026", "content": "https://github.com/rvizx/CVE-2023-26035\n\nUnauthenticated RCE in ZoneMinder Snapshots - Poc Exploit\n#github  #exploit", "url": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/3700"}, {"timestamp": "2023-12-22T17:38:07Z", "date_only": false, "value": "2023-12-22T17:38:07.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/2059", "record": "CVE-2023-26035", "field": "creation_timestamp", "uuid": "f3f7b38d-20ac-4903-b334-3b6860fbf263", "content": "#ExploitObserverAlert\n\nCVE-2023-26035\n\nDESCRIPTION: Exploit Observer has 6 entries related to CVE-2023-26035. ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 are vulnerable to Unauthenticated Remote Code Execution via Missing Authorization. There are no permissions check on the snapshot action, which expects an id to fetch an existing monitor but can be passed an object to create a new one instead. TriggerOn ends up calling shell_exec using the supplied Id. This issue is fixed in This issue is fixed in versions 1.36.33 and 1.37.33.\n\nFIRST-EPSS: 0.104040000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/2059"}, {"timestamp": "2023-12-22T19:59:53Z", "date_only": false, "value": "2023-12-22T19:59:53.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/2069", "record": "CVE-2023-26035", "field": "creation_timestamp", "uuid": "f723ffc5-6474-477f-962e-1fd2c7895bad", "content": "#ExploitObserverAlert\n\nPD/http/cves/2023/CVE-2023-26035\n\nDESCRIPTION: Exploit Observer has 6 entries related to PD/http/cves/2023/CVE-2023-26035. ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras.Versions prior to 1.36.33 and 1.37.33 are vulnerable to Unauthenticated Remote Code Execution via Missing Authorization. There are no permissions check on the snapshot action, which expects an id to fetch an existing monitor but can be passed an object to create a new one instead. TriggerOn ends up calling shell_exec using the supplied Id.", "url": "https://t.me/arpsyndicate/2069"}, {"timestamp": "2023-12-26T05:16:37Z", "date_only": false, "value": "2023-12-26T05:16:37.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/159252", "record": "CVE-2023-26035", "field": "creation_timestamp", "uuid": "16289a0e-b0b5-45f9-ad22-eb2405c00add", "content": "https://ift.tt/45YlL3r\nCVE-2023-26035 Exploit", "url": "https://t.me/ctinow/159252"}, {"timestamp": "2023-12-27T18:46:31Z", "date_only": false, "value": "2023-12-27T18:46:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/6314", "record": "CVE-2023-26035", "field": "creation_timestamp", "uuid": "cc38f4e3-05b4-42c0-aa36-ae12b69390e3", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aExploit for CVE-2023-26035 affecting ZoneMinder < 1.36.33 and < 1.37.33\nURL\uff1ahttps://github.com/Faelian/zoneminder_CVE-2023-26035\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/6314"}, {"timestamp": "2023-12-28T06:17:49Z", "date_only": false, "value": "2023-12-28T06:17:49.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/2203", "record": "CVE-2023-26035", "field": "creation_timestamp", "uuid": "3006187a-6c1b-4d27-9613-c487daf70c75", "content": "#ExploitObserverAlert\n\nCVE-2023-26035\n\nDESCRIPTION: Exploit Observer has 7 entries related to CVE-2023-26035. ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 are vulnerable to Unauthenticated Remote Code Execution via Missing Authorization. There are no permissions check on the snapshot action, which expects an id to fetch an existing monitor but can be passed an object to create a new one instead. TriggerOn ends up calling shell_exec using the supplied Id. This issue is fixed in This issue is fixed in versions 1.36.33 and 1.37.33.\n\nFIRST-EPSS: 0.104040000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/2203"}, {"timestamp": "2023-12-29T10:53:57Z", "date_only": false, "value": "2023-12-29T10:53:57.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/2238", "record": "CVE-2023-26035", "field": "creation_timestamp", "uuid": "f0adca9a-3a77-4f4b-844b-0a34be11addd", "content": "#ExploitObserverAlert\n\nCVE-2023-26035\n\nDESCRIPTION: Exploit Observer has 8 entries related to CVE-2023-26035. ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 are vulnerable to Unauthenticated Remote Code Execution via Missing Authorization. There are no permissions check on the snapshot action, which expects an id to fetch an existing monitor but can be passed an object to create a new one instead. TriggerOn ends up calling shell_exec using the supplied Id. This issue is fixed in This issue is fixed in versions 1.36.33 and 1.37.33.\n\nFIRST-EPSS: 0.104040000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/2238"}, {"timestamp": "2024-03-20T05:06:02Z", "date_only": false, "value": "2024-03-20T05:06:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/9584", "record": "CVE-2023-26035", "field": "creation_timestamp", "uuid": "52fd9ccf-c13b-4646-ac54-fa0e60ca9b0c", "content": "#exploit\n1. CVE-2023-36424:\nWindows Kernel Pool (clfs.sys) Corruption Privilege Escalation\nhttps://ssd-disclosure.com/ssd-advisory-windows-kernel-pool-clfs-sys-corruption-privilege-escalation\n\n2. CVE-2023-46818:\nISPConfig <=3.2.11 (language_edit.php) PHP Code Injection\nhttps://seclists.org/fulldisclosure/2023/Dec/2\n\n3. CVE-2023-26035:\nUnauth RCE in ZoneMinder Snapshots\nhttps://github.com/rvizx/CVE-2023-26035", "url": "https://t.me/CyberSecurityTechnologies/9584"}, {"timestamp": "2024-08-02T11:39:06.520Z", "date_only": false, "value": "2024-08-02T11:39:06.520Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-26035", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-16T08:56:17Z", "date_only": false, "value": "2024-08-16T08:56:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Rootsec_2/2265", "record": "CVE-2023-26035", "field": "creation_timestamp", "uuid": "abffe3b3-5875-4aef-8fbc-8fdd500dabbb", "content": "#exploit\n1. CVE-2023-36424:\nWindows Kernel Pool (clfs.sys) Corruption Privilege Escalation\nhttps://ssd-disclosure.com/ssd-advisory-windows-kernel-pool-clfs-sys-corruption-privilege-escalation\n\n2. CVE-2023-46818:\nISPConfig <=3.2.11 (language_edit.php) PHP Code Injection\nhttps://seclists.org/fulldisclosure/2023/Dec/2\n\n3. CVE-2023-26035:\nUnauth RCE in ZoneMinder Snapshots\nhttps://github.com/rvizx/CVE-2023-26035", "url": "https://t.me/Rootsec_2/2265"}, {"timestamp": "2024-08-24T11:53:41Z", "date_only": false, "value": "2024-08-24T11:53:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Qi2GcI11LtDfpKlL5x0yaUxGZkeNLUPmyGf3aIvELOEb_g", "record": "CVE-2023-26035", "field": "creation_timestamp", "uuid": "9036f064-1b00-4933-becd-14c3fb01b9c8"}, {"timestamp": "2024-09-09T19:22:48Z", "date_only": false, "value": "2024-09-09T19:22:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Celestial_Pulse24/8477", "record": "CVE-2023-26035", "field": "creation_timestamp", "uuid": "f97cb829-c199-48d8-86b0-b3e31e2b0969", "content": "https://github.com/rvizx/CVE-2023-26035\n\nUnauthenticated RCE in ZoneMinder Snapshots - Poc Exploit\n#github  #exploit", "url": "https://t.me/Celestial_Pulse24/8477"}, {"timestamp": "2025-02-06T03:13:45Z", "date_only": false, "value": "2025-02-06T03:13:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2023-26035", "field": "creation_timestamp", "uuid": "21c83e87-5a76-496d-82f5-9b8ebbd3f635"}, {"timestamp": "2025-02-13T16:44:43.135Z", "date_only": false, "value": "2025-02-13T16:44:43.135Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-26035", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-02-23T04:10:51Z", "date_only": false, "value": "2025-02-23T04:10:51.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2023-26035", "field": "creation_timestamp", "uuid": "d7e09d3d-dad1-4325-a726-43678044e572"}, {"timestamp": "2025-10-23T21:13:00Z", "date_only": false, "value": "2025-10-23T21:13:00.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "record": "CVE-2023-26035", "field": "creation_timestamp", "uuid": "9875731a-aa05-432b-a960-2ccfe8890078"}, {"timestamp": "2026-06-17T05:42:30.997Z", "date_only": false, "value": "2026-06-17T05:42:30.997", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-26035", "record": "FKIE_CVE-2023-26035", "field": "lastModified"}, {"timestamp": "2026-08-04T13:00:05.539Z", "date_only": false, "value": "2026-08-04T13:00:05.539185Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/kiberdruzhinnik/77", "record": "CVE-2023-26035", "field": "creation_timestamp", "uuid": "69ddaebb-bd9b-4801-8e1b-9f5b6a30ff51", "url": "https://t.me/kiberdruzhinnik/77"}, {"timestamp": "2026-08-05T00:00:27.623Z", "date_only": false, "value": "2026-08-05T00:00:27.623638Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/kiberdruzhinnik/77", "record": "CVE-2023-26035", "field": "creation_timestamp", "uuid": "ad356ed5-20e9-4272-8863-82532bde0d5b", "url": "https://t.me/kiberdruzhinnik/77"}, {"timestamp": "2026-10-17T09:17:52Z", "date_only": false, "value": "2026-10-17T09:17:52Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2023-26035", "record": "UBUNTU-CVE-2023-26035", "field": "modified"}, {"timestamp": "2026-10-31T14:37:35.755Z", "date_only": false, "value": "2026-10-31T14:37:35.755413Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2023-AS34696", "record": "CLEANSTART-2023-AS34696", "field": "published"}]}