CVE-2026-94367

Deferred Deferred - Pending Action

OS Command Injection in OpenEye Apex NVR Firmware

Publication date: 2026-09-23

Last updated on: 2026-09-26

Assigner: Securifera, Inc.

Description

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains an OS command injection vulnerability in recbackup. An authenticated administrator can supply crafted backup-area configuration input that is passed to a shell command, allowing commands to execute with the privileges of the nvr user. The underlying design has been present since at least firmware 2.2.3.4. This vulnerability is resolved in OpenEye Apex version 3.4.3.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-23

Last Modified

2026-09-26

Generated

2026-10-13

AI Q&A

2026-09-23

EPSS Evaluated

2026-10-12

NVD

CVE-2026-94367

EUVD

EUVD-2026-84985

Affected Vendors & Products

Vendor	Product	Version / Range
openeye	apex_network_video_recorder	3.2.9.376
openeye	apex_network_video_recorder	3.5.4
openeye	apex_server_software	3.4.3

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-78	The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Attack-Flow Graph

Executive Summary

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 has an OS command injection flaw in the recbackup component. An authenticated admin can inject malicious input into backup-area configuration settings, which is then executed as a shell command with the privileges of the nvr user. This flaw has existed since at least firmware version 2.2.3.4.

Detection Guidance

To detect this vulnerability, check if your OpenEye Apex NVR firmware version is below 3.5.4. Verify the version via the web interface or CLI. Search for unauthorized backup-area configuration changes or unexpected shell commands in logs. Monitor network traffic for unusual outbound connections from the NVR.

Impact Analysis

An attacker with admin access could execute arbitrary commands on the system, potentially gaining control over the NVR, accessing sensitive data, disrupting video surveillance, or using the device as a pivot point to attack other systems on the network.

Compliance Impact

This vulnerability allows authenticated administrators to execute arbitrary commands with elevated privileges, potentially leading to unauthorized access or data exfiltration. Such risks could violate compliance requirements under GDPR (data protection) and HIPAA (health data security) by enabling unauthorized access to sensitive data.

Mitigation Strategies

Upgrade to Apex Server Software version 3.4.3 or later immediately to resolve the vulnerability.

Hi! I’m here to help you understand CVE-2026-94367. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70