PatchSiren cyber security CVE debrief
CVE-2026-51134 C‑MOR CVE debrief
The C-MOR Video Surveillance web interface, up to version 6.0104, is vulnerable to Path Traversal via the 'cam' parameter in show-movies.pml. This vulnerability has a CVSS score of 7.5 and is classified as HIGH severity. The CVE record was published on 2026-09-15T20:17:17.493Z and was last modified on 2026-09-22T20:00:03.713Z. Defenders responsible for C-MOR Video Surveillance systems, especially those with publicly accessible web interfaces, should assess exposure and prioritize verification of affected versions. The vulnerability requires verification of affected versions and assessment of exposure to prevent potential exploitation.
- Vendor
- C‑MOR
- Product
- Video Surveillance
- CVSS
- HIGH 7.5
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-09-15
- Original CVE updated
- 2026-09-22
- Advisory published
- 2026-09-15
- Advisory updated
- 2026-09-22
Who should care
Defenders responsible for C-MOR Video Surveillance systems, especially those with publicly accessible web interfaces, should assess exposure and prioritize verification of affected versions.
Why it matters
The C-MOR Video Surveillance web interface vulnerability requires verification of affected versions and assessment of exposure to prevent potential exploitation.
- Verify affected versions and assess exposure of C-MOR Video Surveillance systems
- Restrict access to the web interface to prevent potential exploitation
- Monitor for potential exploitation attempts to detect potential attacks
Technical summary
The C-MOR Video Surveillance web interface is vulnerable to Path Traversal via the 'cam' parameter in show-movies.pml. This could allow an attacker to access sensitive files or directories. The vulnerability has a CVSS score of 7.5 and is classified as HIGH severity. The CVE record was published on 2026-09-15T20:17:17.493Z and was last modified on 2026-09-22T20:00:03.713Z.
Defensive priority
Defenders should prioritize verifying the affected versions and assessing exposure of C-MOR Video Surveillance systems, especially those with publicly accessible web interfaces.
Recommended defensive actions
- Verify the version of C-MOR Video Surveillance and assess exposure
- Review and restrict access to the web interface
- Monitor for potential exploitation attempts
Evidence notes
The CVE record and NVD entry provide details on the vulnerability, but additional information on affected versions and potential exploitation is limited.
Sources and references
Verified primary and authoritative sources
-
CVE-2026-51134 CVE Program record
Publisher, destination, and source semantics verified
URL: https://www.cve.org/CVERecord?id=CVE-2026-51134
CVE Program - Official CVE Program record with source-provided CVE metadata.
-
CVE-2026-51134 NVD vulnerability detail
Publisher, destination, and source semantics verified
URL: https://nvd.nist.gov/vuln/detail/CVE-2026-51134
NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.
Supplemental references
-
Source reference
Unverified legacy reference
URL: https://albcyberguards.com/blog/cve-2026-51134-c-mor-path-traversal
-
Source reference
Unverified legacy reference
URL: https://www.c-mor.com/video-surveillance-info/video-surveillance-change-log
Methodology and review provenance
AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.