HIGH 7.2 NVD

CVE-2026-94367

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains an OS command injection vulnerability in recbackup. An authenticated administrator can sup

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains an OS command injection vulnerability in recbackup. An authenticated administrator can supply crafted backup-area configuration input that is passed to a shell command, allowing commands to execute with the privileges of the nvr user. The underlying design has been present since at least firmware 2.2.3.4. Upgrade to version 3.5.4.

References

https://portal.openeye.net/updates/issue-alerts/1061
https://www.securifera.com/advisories/

Published: 2026-09-23 · Source: NVD · Feed updated: 2026-09-23

This high severity vulnerability with a CVSS score of 7.2 was published on 2026-09-23 via NVD.

vulnfeed aggregates 13411 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.