CVE-2026-92929

Summary

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 trusts an X-Forwarded-For header supplied by an arbitrary client when determining the request source address. An unauthenticated remote attacker can spoof a loopback address to bypass local-connection-only security controls exposed on the affected non-TLS web interfaces and disclose configuration information. The underlying design has been present since at least firmware 2.2.3.4.

Upgrade to version 3.5.4.

Affected Software

VendorProductVersion RangeStatus
OpenEyeApex Network Video Recorder (NVR)3.2.9.376affected

Weaknesses

  • CWE-290: CWE-290: Authentication Bypass by Spoofing

References