Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.2

OpenEye Apex NVR lets admin run system commands

CVE-2026-94367 · published 1 month ago
Summary

The OpenEye Apex network video recorder firmware version 3.2.9.376 lets a signed‑in administrator set a backup option that is passed directly to the system shell, so they could cause the device to execute any command it can run. This could let an attacker take control of the recorder or disrupt video storage. Upgrade the recorder to firmware version 3.5.4 to close the issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
openeye apex network video recorder (nvr) 3.2.9.376
Original advisory text
OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains an OS command injection vulnerability in recbackup. An authenticated administrator can supply crafted backup-area configuration...
OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains an OS command injection vulnerability in recbackup. An authenticated administrator can supply crafted backup-area configuration input that is passed to a shell command, allowing commands to execute with the privileges of the nvr user. The underlying design has been present since at least firmware 2.2.3.4.

This vulnerability is resolved in OpenEye Apex version 3.4.3.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
7.2 High
Exploitation
1% chance of attack within 30 days
Type
CWE-78OS Command Injection
Timeline
Published23 Sep 2026
Updated31 Oct 2026
First seen23 Sep 2026
Sources
CVE-2026-94367 · NVD
CVE-2026-94367 · MITRE
Track software like this
Free during beta