PT-2026-97113 · Openeye · Apex Network Video Recorder

Ryan Wincey

·

CVE-2026-92930

·

Published

2026-09-22

·

Updated

2026-09-23

CVSS v3.1

6.2

Medium

VectorAV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions OpenEye Apex Network Video Recorder (NVR) versions 2.2.3.4 through 3.2.9.376
Description The administrator password-reset unlock-code design lacks a per-device secret or server-side cryptographic material. An attacker with physical-console access and access to the privileged password-reset workflow can forge a valid unlock code offline to reset the administrator password.
Recommendations Upgrade to version 3.5.4.

Fix

Use of Insufficiently Random Values

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-330

Related Identifiers

CVE-2026-92930

Affected Products

Apex Network Video Recorder