Will Zoneminder RCE vulnerability be actively exploited in the wild by end of September 2026?

CISA disclosed a critical Zoneminder vulnerability (versions 1.37.48, 1.38.3) with CVSS 8.8 allowing full Remote Code Execution (RCE) as the web server user. (Source: CISA Alerts, August 26, 2026)

Resolution Criteria

YES if CISA, vendor advisories, or reputable security research confirms active exploitation of Zoneminder RCE in the wild by September 30, 2026. Evidence includes confirmed incident reports, PoC usage in attacks, or honeypot detection. NO if no active exploitation confirmed by deadline.