CVE-2026-51134
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
C-MOR 视频监控系统 Web 界面（版本 6.0104 及更早版本）存在路径遍历漏洞，可通过 文件中的 参数触发。
Public Exploits 1
ExploitDB · 1
EDB-52666 [webapps]
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-51134
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
The C-MOR Video Surveillance web interface (up to version 6.0104) is vulnerable to Path Traversal via the 'cam' parameter in show-movies.pml.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2026-51134
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-51134
请登录查看更多情报信息。
Security Blog Posts for CVE-2026-51134 (1)
Other References for CVE-2026-51134 (1)
Same Patch Batch · n/a · 2026-09-15 · 34 CVEs total
| CVE-2026-91848 | 7.3 HIGH | WuzhiCMS index.php getDataOfJson sql injection |
| CVE-2026-91087 | 7.3 HIGH | GPAC Compositor media_object.c gf_mo_get_od_id use after free |
| CVE-2026-91849 | 6.3 MEDIUM | WuzhiCMS Avatar Upload index.php setAvatar unrestricted upload |
| CVE-2026-91089 | 6.3 MEDIUM | GPAC base_scenegraph.c gf_node_get_name_and_id use after free |
| CVE-2026-91086 | 6.3 MEDIUM | GPAC MPEG Video Reframer reframe_mpgvid.c mpgviddmx_process heap-based overflow |
| CVE-2026-91855 | 5.3 MEDIUM | Open5GS PFCP Message handler.c denial of service |
| CVE-2026-91088 | 4.8 MEDIUM | GPAC URL url.c gf_url_concatenate_ex heap-based overflow |
| CVE-2026-91091 | 4.3 MEDIUM | GPAC Node Insertion base_scenegraph.c gf_node_list_insert_child memory corruption |
| CVE-2026-91090 | 3.9 LOW | GPAC base_scenegraph.c gf_node_activate_ex stack-based overflow |
| CVE-2026-88621 | OneNav v1.2.4管理员任意文件删除致拒绝服务 | |
| CVE-2026-51133 | za-internet C-MOR ≤6.0104 跨站脚本漏洞 | |
| CVE-2026-52484 | MitraStar GPT-2742GL_g2.5远程代码执行漏洞 | |
| CVE-2025-66974 | Prolink DS-3202M-UKv3 设备拒绝服务漏洞 | |
| CVE-2026-39040 | BharatMLStack 1.3.0 Trufflebox UI XSS漏洞 | |
| CVE-2026-39038 | BharatMLStack v1.3.0 存在XSS漏洞 | |
| CVE-2026-39039 | BharatMLStack≤1.3.0 localStorage泄露敏感会话信息 | |
| CVE-2026-79409 | Bagisto 2.4.9 信息泄露漏洞 | |
| CVE-2026-88742 | Bacularis 1.0.0-6.5.0 存储型跨站脚本漏洞 | |
| CVE-2026-88743 | Bacularis 4.7.0-6.5.0 存储型XSS漏洞 | |
| CVE-2026-79411 | Bagisto 2.4.9 权限提升至管理员漏洞 |
Showing top 20 of 34 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
-
CVE-2026-91855
Open5GS PFCP Message handler.c denial of service -
CVE-2026-91849
WuzhiCMS Avatar Upload index.php setAvatar unrestricted uplo -
CVE-2026-91848
WuzhiCMS index.php getDataOfJson sql injection -
CVE-2026-91091
GPAC Node Insertion base_scenegraph.c gf_node_list_insert_ch -
CVE-2026-91090
GPAC base_scenegraph.c gf_node_activate_ex stack-based overf
V. Comments for CVE-2026-51134
No comments yet