Path Traversal in C-MOR Video Surveillance

Executive Summary

CVE-2026-51134 is a Path Traversal vulnerability in the C-MOR Video Surveillance web interface up to version 6.0104. It allows attackers to read arbitrary system files through the 'cam' parameter in the show-movies.pml component without authentication.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, check if your C-MOR Video Surveillance system is running version 6.0104 or earlier. Test the 'cam' parameter in show-movies.pml by attempting to access system files via a web browser or curl command, such as: curl http://[target]/show-movies.pml?cam=../../../../etc/passwd. If files are accessible without authentication, the system is vulnerable.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability could allow unauthorized access to sensitive system files, potentially exposing confidential data, configuration details, or other critical information stored on the C-MOR Video Surveillance system.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability may lead to non-compliance with GDPR or HIPAA by enabling unauthorized access to personal or sensitive data, potentially resulting in data breaches and regulatory penalties.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update C-MOR Video Surveillance to the latest version beyond 6.0104. If an update is not available, restrict access to the web interface via network segmentation or firewall rules. Disable the vulnerable parameter if possible and monitor for unauthorized file access attempts.

Useful 0 Not Useful 0