CVE-2026-51133

Description

Cross Site Scripting vulnerability in za-internet GmbH C-MOR Video Surveillance <= V6.0104 allows a remote attacker to execute arbitrary code via the size parameter in ptzpreset.pml component and the showmovies.pml component

Exploits & proofs of concept

• exploit-dbC-MOR 6.0104 - Cross-Site Scripting (XSS)by Samir Shamdin

References

• MISChttps://www.c-mor.com/video-surveillance-info/video-surveillance-change-log
• MISChttps://albcyberguards.com/blog/cve-2026-51133-c-mor-cross-site-scripting