Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: OpenEye Clear all filters
TI-2026-63397 CVE-2026-94367 · GHSA-xr8v-x794-fm52

OS command injection in OpenEye Apex Network Video Recorder

Priority LOW 36

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains an OS command injection vulnerability in recbackup.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01026 Published 2026-09-22 Fixed in 3.4.3 CWE-78
TI-2026-62593 CVE-2026-92929 · GHSA-2jx4-m53c-2mqc

Authentication bypass by spoofing in OpenEye Apex Network Video Recorder

Priority LOW 31

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 trusts an X-Forwarded-For header supplied by an arbitrary client when determining the request source address.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00482 Published 2026-09-22 No fix listed CWE-290
TI-2026-62592 CVE-2026-92928 · GHSA-2h86-6hmv-8f46

Hard-coded credentials in OpenEye Apex Network Video Recorder

Priority LOW 35

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains a hardcoded, undocumented recovery account with a shared credential that cannot be changed, disabled, or rotated.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00348 Published 2026-09-22 No fix listed CWE-798