PT-2026-97112
CVE-2026-92929
·
تاريخ النشر
2026-09-22
·
تاريخ التحديث
2026-09-23
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
OpenEye Apex Network Video Recorder versions 2.2.3.4 through 3.2.9.376
Description
The software trusts an
X-Forwarded-For header provided by a client to determine the request source address. This allows an unauthenticated remote attacker to spoof a loopback address and bypass security controls that restrict access to local connections on non-TLS web interfaces, leading to the disclosure of configuration information.Recommendations
Upgrade to version 3.5.4.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾