CVE-2026-92929
Received Received - Intake

OpenEye NVR Firmware X-Forwarded-For Spoofing Vulnerability

Publication date: 2026-09-23

Last updated on: 2026-09-23

Assigner: Securifera, Inc.

Description
OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 trusts an X-Forwarded-For header supplied by an arbitrary client when determining the request source address. An unauthenticated remote attacker can spoof a loopback address to bypass local-connection-only security controls exposed on the affected non-TLS web interfaces and disclose configuration information. The underlying design has been present since at least firmware 2.2.3.4. Upgrade to version 3.5.4.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-23
Last Modified
2026-09-23
Generated
2026-09-23
AI Q&A
2026-09-23
EPSS Evaluated
N/A
NVD
CVE-2026-92929
EUVD
EUVD-2026-84983

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
openeye apex_network_video_recorder to 3.5.4 (exc)
openeye apex_network_video_recorder 3.5.4

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-290 This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 has a flaw where it trusts the X-Forwarded-For header from any client to determine the source address of a request. This allows an unauthenticated remote attacker to spoof a loopback address and bypass security controls that should only allow local connections. The issue exposes non-TLS web interfaces and may lead to unauthorized disclosure of configuration information.

Detection Guidance

This vulnerability can be detected by checking the firmware version of OpenEye Apex NVR. If the version is below 3.5.4, the system is vulnerable. Use the web interface or CLI to verify the firmware version.

Impact Analysis

An attacker could exploit this to access sensitive configuration details on your OpenEye Apex NVR without authentication. Since the vulnerability allows bypassing local-only restrictions, it increases the risk of unauthorized access to system settings, potentially compromising the security and privacy of your video surveillance infrastructure.

Mitigation Strategies

Immediately upgrade to Apex Server Software version 3.5.4 or later. This resolves the vulnerability by addressing the X-Forwarded-For header spoofing issue.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-92929. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart