All 6 CVE vulnerabilities found in motioneye, with AI-generated Chinese analysis, references, and POCs.
Vendor: motioneye-project
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-55863 | motionEye: Missing authentication on ActionHandler allows unauthenticated camera action execution CWE-862 | 5.3 | Medium | 2026-09-15 |
| CVE-2026-46488 | motionEye: Authentication possible via password hash CWE-256 | 9.1 | Critical | 2026-09-15 |
| CVE-2026-32315 | motionEye: World-Readable Configuration File Exposes Admin Password Hash CWE-732 | 5.5 | Medium | 2026-06-24 |
| CVE-2026-31978 | motionEye: Arbitrary File Read via Path Traversal in Picture/Movie Preview Endpoint CWE-22 | 6.5 | Medium | 2026-06-24 |
| CVE-2026-55488 | motionEye's Absolute Path Traversal in Media File Handlers Allows Arbitrary File Read CWE-22 | - | - | 2026-06-24 |
| CVE-2025-47782 | motionEye vulnerable to RCE in add_camera Function Due to unsafe command execution CWE-78 | 7.2AI | High AI | 2025-05-14 |
All 6 known CVE vulnerabilities affecting motioneye with full Chinese analysis, references, and POCs where available.