TI-2026-27356 CVE-2026-35203
ZLMediaKit VP9 RTP Parser Out-of-Bounds Read
Priority HIGH 72
ZLMediaKit is a streaming media service framework.
ZLMediaKit
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
ZLMediaKit records in CISA KEVNo ZLMediaKit vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
TI-2023-15246 CVE-2023-31861 · GHSA-qvq6-m5vj-xm45
ZLMediaKit 4.0 is vulnerable to Directory Traversal.
Priority MEDIUM 41
ZLMediaKit 4.0 is vulnerable to Directory Traversal.
TI-2022-17354 CVE-2022-37237 · GHSA-wg85-4484-2x94
An attacker can send malicious RTMP requests to make the ZLMediaKit server crash remotely.
Priority LOW 34
An attacker can send malicious RTMP requests to make the ZLMediaKit server crash remotely.
TI-2026-56038 CVE-2026-81028 · GHSA-4j5x-jgmh-j582
ZLMediaKit downloadFile Root-Directory Confinement Bypass via Prefix Collision
Priority LOW 31
ZLMediaKit confines the downloadFile API to a configured set of root directories with a prefix comparison that does not account for directory boundaries.
TI-2023-20282 CVE-2023-39067 · GHSA-7ggr-xmp8-v34h
Cross Site Scripting vulnerability in ZLMediaKiet v.4.0 and v.5.0 allows an attacker to…
Priority LOW 27
Cross Site Scripting vulnerability in ZLMediaKiet v.4.0 and v.5.0 allows an attacker to execute arbitrary code via a crafted script to the URL.