Vulnerabilities

TI-2026-40322 CVE-2026-55863 · GHSA-j67x-q29f-qcvv

motionEye: Missing authentication on ActionHandler allows unauthenticated camera action execution

MEDIUM 63

motionEye (mEye) is an online interface for a piece of software called "motion," which is a video surveillance program with motion detection.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00496 Published 2026-09-15 Fixed in 0.44.0 CWE-862

TI-2026-34187 CVE-2026-46488 · GHSA-r3cw-c95m-wfh9

motionEye: Authentication possible via password hash

HIGH 80

motionEye (mEye) is an online interface for a piece of software called "motion," which is a video surveillance program with motion detection.

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00464 Published 2026-09-15 Fixed in 0.44.0 CWE-256

TI-2026-24843 CVE-2026-32315 · GHSA-rhgp-6wq6-9j67

motionEye: World-Readable Configuration File Exposes Admin Password Hash

MEDIUM 58

motionEye (mEye) is an online interface for motion software, a video surveillance program with motion detection.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.01677 Published 2026-06-24 Fixed in 0.44.0 CWE-200

TI-2026-24521 CVE-2026-31978 · GHSA-g9fx-5r4h-pcw3

motionEye: Arbitrary File Read via Path Traversal in Picture/Movie Preview Endpoint

MEDIUM 62

motionEye (mEye) is an online interface for motion software, which is a video surveillance program with motion detection.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00336 Published 2026-06-24 Fixed in 0.44.0 CWE-22

TI-2026-40043 CVE-2026-55488 · GHSA-rw9q-97r9-8gvh

motionEye's Absolute Path Traversal in Media File Handlers Allows Arbitrary File Read

HIGH 73

motionEye (mEye) is an online interface for a piece of software called "motion," which is a video surveillance program with motion detection.

CVSS 4.0HIGH 7.7 Network No auth No interaction EPSS 0.00605 Published 2026-06-24 Fixed in 0.44.0 CWE-22

TI-2025-37818 CVE-2025-60787 · GHSA-j945-qm58-4gjx

MotionEye v0.43.1b4 and before is vulnerable to OS Command Injection in configuration…

HIGH 67

MotionEye v0.43.1b4 and before is vulnerable to OS Command Injection in configuration parameters such as image_file_name.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.18462 Published 2025-10-03 Fixed in 0.43.1b5 CWE-116

TI-2025-30247 CVE-2025-47782 · GHSA-g5mq-prx7-c588

motionEye vulnerable to RCE in add_camera Function Due to unsafe command execution

HIGH 80

motionEye is an online interface for the software motion, a video surveillance program with motion detection.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.00508 Published 2025-05-14 Fixed in 0.43.1b4 CWE-78

TI-2022-09169 CVE-2022-25568 · GHSA-2c7w-v459-cwgf

MotionEye v0.42.1 and below allows attackers to access sensitive information via a GET…

MEDIUM 43

MotionEye v0.42.1 and below allows attackers to access sensitive information via a GET request to /config/list.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0686 Published 2022-03-24 Fixed in 0.43.1b1 CWE-1188

TI-2021-19932 CVE-2021-44255 · GHSA-m2c7-42rf-c62f

Authenticated remote code execution in MotionEye <= 0.42.1 and MotioneEyeOS <= 20200606…

LOW 37

Authenticated remote code execution in MotionEye <= 0.42.1 and MotioneEyeOS <= 20200606 allows a remote attacker to upload a configuration backup file containing a malicious python pickle file which will execute arbitrar…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.03138 Published 2022-01-31 No fix listed CWE-306

Vulnerabilities

Filters