CyberSecBulletin

ZLMediaKit vulnerabilities

We track 2 vulnerabilities in ZLMediaKit products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 6, 2026.

2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score

Latest ZLMediaKit vulnerabilities

  • 7.5 High severity

    ZLMediaKit: Out-of-bounds Read

    CVE-2026-35203ZLMediaKit

    ZLMediaKit is a streaming media service framework. the VP9 RTP payload parser in ext-codec/VP9Rtp.cpp reads multiple fields from the RTP payload based on flag bits in the first byte, without verifying that sufficient data exists in the buffer. A crafted VP9 RT

  • 9.8 Critical severity

    zlmediakit: Use of Hard-coded Password

    CVE-2024-27488ZLMediaKit

    Incorrect Access Control vulnerability in ZLMediaKit versions 1.0 through 8.0, allows remote attackers to escalate privileges and obtain sensitive information. The application system enables the http API interface by default and uses the secret parameter metho