Read the docs

OpenEye

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

OpenEye records in CISA KEV

No OpenEye vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2026-63397 CVE-2026-94367 · GHSA-xr8v-x794-fm52

OS command injection in OpenEye Apex Network Video Recorder

Priority LOW 36

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains an OS command injection vulnerability in recbackup.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01026 Published 2026-09-22 Fixed in 3.4.3 CWE-78
TI-2026-62592 CVE-2026-92928 · GHSA-2h86-6hmv-8f46

Hard-coded credentials in OpenEye Apex Network Video Recorder

Priority LOW 35

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains a hardcoded, undocumented recovery account with a shared credential that cannot be changed, disabled, or rotated.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00348 Published 2026-09-22 No fix listed CWE-798
TI-2026-62593 CVE-2026-92929 · GHSA-2jx4-m53c-2mqc

Authentication bypass by spoofing in OpenEye Apex Network Video Recorder

Priority LOW 31

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 trusts an X-Forwarded-For header supplied by an arbitrary client when determining the request source address.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00482 Published 2026-09-22 No fix listed CWE-290
Open these records in search →