CVE-2026-94367
7.2 HIGHPublished 2026-09-23 · Updated 2026-09-26
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains an OS command injection vulnerability in recbackup. An authenticated administrator can supply crafted backup-area configuration input that is passed to a shell command, allowing commands to execute with the privileges of the nvr user. The underlying design has been present since at least firmware 2.2.3.4. This vulnerability is resolved in OpenEye Apex version 3.4.3.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-78
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2022-51019PoC
- HIGHCVE-2025-14754
- HIGHCVE-2026-100292
- HIGHCVE-2026-100368PoC
- UNSCOREDCVE-2026-100382
- HIGHCVE-2026-100559PoC
- HIGHCVE-2026-100599PoC
- HIGHCVE-2026-100844PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.