OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains an OS command injection vulnerability in recbackup. An authenticated administrator can supply crafted backup-area configuration i…

High CVSS 7.2

CVECVE-2026-94367

First seen2026-09-23 02:16 UTC

Disclosed2026-09-23 00:17 UTC

Last updated2026-09-23 02:16 UTC

Channel statusauto

Summary

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains an OS command injection vulnerability in recbackup. An authenticated administrator can supply crafted backup-area configuration input that is passed to a shell command, allowing commands to execute with the privileges of the nvr user. The underlying design has been present since at least firmware 2.2.3.4. Upgrade to version 3.5.4.

In-depth triage

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Sources

NVD DATABASE

Original Links

https://portal.openeye.net/updates/issue-alerts/1061
https://www.securifera.com/advisories/

Timeline

2026-09-23 nvd_ingest NVD