ZLMediaKit

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

ZLMediaKit records in CISA KEV

No ZLMediaKit vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Zlmediakit · all components

TI-2026-27356 CVE-2026-35203

HIGH 72

ZLMediaKit is a streaming media service framework.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00359 Published 2026-04-06 Fixed in 435dcbc CWE-125

TI-2023-15246 CVE-2023-31861 · GHSA-qvq6-m5vj-xm45

MEDIUM 41

ZLMediaKit 4.0 is vulnerable to Directory Traversal.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01136 Published 2023-05-25 No fix listed CWE-22

TI-2022-17354 CVE-2022-37237 · GHSA-wg85-4484-2x94

LOW 34

An attacker can send malicious RTMP requests to make the ZLMediaKit server crash remotely.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00815 Published 2022-08-30 No fix listed

TI-2023-20282 CVE-2023-39067 · GHSA-7ggr-xmp8-v34h

LOW 27

Cross Site Scripting vulnerability in ZLMediaKiet v.4.0 and v.5.0 allows an attacker to execute arbitrary code via a crafted script to the URL.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00395 Published 2023-09-11 No fix listed CWE-79