CVE-2026-94367: OS Command Injection

Q: Who can exploit this issue?

An authenticated administrator can exploit it by providing crafted backup-area configuration input. The resulting commands execute with the privileges of the nvr user.

Q: Which firmware versions may be affected?

Firmware 3.2.9.376 is affected, and the underlying design has been present since at least firmware 2.2.3.4. Upgrade to firmware version 3.5.4.

Published Sep 22, 2026

Updated

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains an OS command injection vulnerability in recbackup. An authenticated administrator can supply crafted backup-area configuration input that is passed to a shell command, allowing commands to execute with the privileges of the nvr user. The underlying design has been present since at least firmware 2.2.3.4.

Upgrade to version 3.5.4.

Affected Software

1 affected component

OpenEye Apex Network Video Recorder (NVR)>=2.2.3.4<3.5.4

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade OpenEye Apex Network Video Recorder (NVR) firmware to a version that resolves this vulnerability.
Fixed in 3.5.4

Event History

Sep 22, 2026

CVE Published

via MITRE·11:10 PM

Data Sourced

via MITRE·11:10 PM

RemedyDescriptionSeverityWeakness

Sep 23, 2026

Data Sourced

via NVD·12:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

An authenticated administrator can exploit it by providing crafted backup-area configuration input. The resulting commands execute with the privileges of the nvr user.

Which firmware versions may be affected?