CVE-2026-94367

HIGHCVSS 7.2

Description

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains an OS command injection vulnerability in recbackup. An authenticated administrator can supply crafted backup-area configuration input that is passed to a shell command, allowing commands to execute with the privileges of the nvr user. The underlying design has been present since at least firmware 2.2.3.4. This vulnerability is resolved in OpenEye Apex version 3.4.3.

Timeline

Published:September 23rd, 2026 12:17 AM

Last modified:September 26th, 2026 12:17 PM

CVSS Scoring

CVSS v3: 7.2 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-78

References & Reports

Advisories, patches, and third-party reports

https://portal.openeye.net/updates/issue-alerts/1061
https://www.securifera.com/advisories/

Source: NIST NVD · Data may lag official sources by up to one minute