CVE-2026-37281 | hitarth-gg Zenshin up to 2.6.x Parameter /stream-to-vlc url os command injection

A vulnerability, which was classified as critical, was found in hitarth-gg Zenshin up to 2.6.x. This affects an unknown function of the file /stream-to-vlc of the component Parameter Handler. Executing a manipulation of the argument url can lead to os command injection.

This vulnerability is tracked as CVE-2026-37281. The attack can be launched remotely. No exploit exists.

You should upgrade the affected component.