CVE-2026-92928

MEDIUM 6.5

CVSS Score

6.5

EPSS Score

0.0%

EPSS Percentile

0th

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains a hardcoded, undocumented recovery account with a shared credential that cannot be changed, disabled, or rotated. An unauthenticated remote attacker can use the account to authenticate to the password-reset workflow. The account does not provide normal administrator access; additional vulnerabilities are required to obtain an administrator takeover. The underlying design has been present since at least firmware 2.2.3.4. Upgrade to version 3.5.4.

CWE	CWE-798
Vendor	openeye
Product	apex network video recorder (nvr)
Published	Sep 22, 2026
Last Updated	Sep 22, 2026

Stay Ahead of the Next One

Get instant alerts for openeye apex network video recorder (nvr)

Be the first to know when new medium vulnerabilities affecting openeye apex network video recorder (nvr) are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

None

Affected Versions

OpenEye / Apex Network Video Recorder (NVR)

3.2.9.376

References

NVD ↗ CVE.org ↗ EPSS Data ↗

portal.openeye.net: https://portal.openeye.net/updates/issue-alerts/1058 securifera.com: https://www.securifera.com/advisories/

Credits

Ryan Wincey (@rwincey, Securifera)