CVE-2026-94367
Quick assessment
Affected
OpenEye Apex Network Video Recorder (NVR)
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains an OS command injection vulnerability in recbackup. An authenticated administrator can supply crafted backup-area configuration input that is passed to a shell command, allowing commands to
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-94367
Vulnerability Information
Shenlong is analyzing...
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains an OS command injection vulnerability in recbackup. An authenticated administrator can supply crafted backup-area configuration input that is passed to a shell command, allowing commands to execute with the privileges of the nvr user. The underlying design has been present since at least firmware 2.2.3.4.
Upgrade to version 3.5.4.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| OpenEye | Apex Network Video Recorder (NVR) | 3.2.9.376 | - |
|
II. Public POCs for CVE-2026-94367
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-94367
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-94367 (1)
Same Patch Batch · OpenEye · 2026-09-22 · 4 CVEs total
| CVE-2026-92928 | 6.5 MEDIUM | OpenEye Apex NVR 3.2.9.376硬编码恢复账户漏洞 |
| CVE-2026-92930 | 6.2 MEDIUM | OpenEye Apex NVR 3.2.9.376 管理员密码重置缺陷 |
| CVE-2026-92929 | 5.3 MEDIUM | OpenEye Apex NVR 3.2.9.376 XFF伪造绕过漏洞 |
IV. Related Vulnerabilities
Same weakness: CWE-78
-
CVE-2026-19599
Remote Code Execution vulnerability -
CVE-2026-76978
Command Injection vulnerability -
CVE-2026-15027
Changing｜CGServiSign - OS Command Injection -
CVE-2026-17102
DataStage on Cloud Pak for Data has several vulnerabilities -
CVE-2026-16469
DataStage on Cloud Pak for Data has several vulnerabilities
V. Comments for CVE-2026-94367
No comments yet