PT-2026-97114
CVE-2026-94367
·
تاريخ النشر
2026-09-22
·
تاريخ التحديث
2026-09-26
الوصف من
CVSS 3.1
7.2
عاليةالمقاييسAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
OpenEye Apex Network Video Recorder versions 2.2.3.4 through 3.2.9.376
Description
An OS command injection issue exists in the
recbackup component. An authenticated administrator can provide specially crafted backup-area configuration input that is passed to a shell command, enabling the execution of arbitrary commands with the privileges of the nvr user.Recommendations
Upgrade to version 3.5.4.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾