CVE-2016-10205: Zoneminder

High severity, CVSS 7.3. EPSS: 1.4% chance of exploitation in the next 30 days.

Session fixation vulnerability in Zoneminder 1.30 and earlier allows remote attackers to hijack web sessions via the ZMSESSID cookie.

Affected products

• Zoneminder Zoneminder: up to and including 1.30.0

Published 2017-03-03. Last modified 2026-06-17.