CVE-2026-51134

The C-MOR Video Surveillance web interface (up to version 6.0104) is vulnerable to Path Traversal via the 'cam' parameter in show-movies.pml. The vulnerability may allow an attacker to access files outside the intended directory.

An attacker can read arbitrary files accessible to the server process, potentially leading to disclosure of sensitive information including configuration data or camera recordings. This could also be used for further attack escalation.

Update C-MOR Video Surveillance to a version later than 6.0104 if available. Until patched, restrict access to the web interface and verify no unauthorized file access occurred.