Cross Site Scripting Vulnerability in C-MOR Video Surveillance by za-internet GmbH
CVE-2026-51133

6.1MEDIUM

Key Information:

Vendor

za-internet GmbH

Status
C-MOR Video Surveillance
Vendor
CVE Published:
15 September 2026

What is CVE-2026-51133?

A Cross Site Scripting vulnerability exists in C-MOR Video Surveillance software developed by za-internet GmbH, affecting versions up to V6.0104. This vulnerability allows a remote attacker to execute arbitrary code through manipulation of the size parameter in the ptzpreset.pml and showmovies.pml components. Exploiting this flaw could lead to unauthorized access and control over the application, posing significant risks to user security and data integrity.

References

https://www.c-mor.com/video-surveillance-info/video-surve...
https://albcyberguards.com/blog/cve-2026-51133-c-mor-cros...

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.