Vendors / motioneye-project Records 9 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 5
Exploited now motioneye-project records in CISA KEV No motioneye-project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 80
motionEye (mEye) is an online interface for a piece of software called "motion," which is a video surveillance program with motion detection.
CVSS 4.0 CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00464 · Published 2026-09-15 · Fixed in 0.44.0 CWE-256
Priority HIGH 80
motionEye is an online interface for the software motion, a video surveillance program with motion detection.
CVSS 4.0 HIGH 8.9· Network · No auth · No interaction · EPSS 0.00508 · Published 2025-05-14 · Fixed in 0.43.1b4 CWE-78
Priority HIGH 73
motionEye (mEye) is an online interface for a piece of software called "motion," which is a video surveillance program with motion detection.
CVSS 4.0 HIGH 7.7· Network · No auth · No interaction · EPSS 0.00605 · Published 2026-06-24 · Fixed in 0.44.0 CWE-22
Priority HIGH 67
MotionEye v0.43.1b4 and before is vulnerable to OS Command Injection in configuration parameters such as image_file_name.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.18462 · Published 2025-10-03 · Fixed in 0.43.1b5 CWE-116
Priority MEDIUM 63
motionEye (mEye) is an online interface for a piece of software called "motion," which is a video surveillance program with motion detection.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00496 · Published 2026-09-15 · Fixed in 0.44.0 CWE-862
Priority MEDIUM 62
motionEye (mEye) is an online interface for motion software, which is a video surveillance program with motion detection.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00336 · Published 2026-06-24 · Fixed in 0.44.0 CWE-22
Priority MEDIUM 58
motionEye (mEye) is an online interface for motion software, a video surveillance program with motion detection.
CVSS 3.1 MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.01677 · Published 2026-06-24 · Fixed in 0.44.0 CWE-200
Priority MEDIUM 43
MotionEye v0.42.1 and below allows attackers to access sensitive information via a GET request to /config/list.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.0686 · Published 2022-03-24 · Fixed in 0.43.1b1 CWE-1188
Priority LOW 37
Authenticated remote code execution in MotionEye <= 0.42.1 and MotioneEyeOS <= 20200606 allows a remote attacker to upload a configuration backup file containing a malicious python pickle file which will execute arbitrar…
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.03138 · Published 2022-01-31 · No fix listed CWE-306
Open these records in search → All records by CVSS severity
1 5 3 0 0
THREATIST.IORead the docs