CVE-2026-92928CWE-798hardcoded-credentials

CVE-2026-92928

Medium · published September 23, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
10.4
In the wild
Unconfirmed
What it is

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains a hardcoded, undocumented recovery account with a shared credential that cannot be changed, disabled, or rotated. An unauthenticated remote attacker can use the account to authenticate to the password-reset workflow. The account does not provide normal administrator access; additional vulnerabilities are required to obtain an administrator takeover. The underlying design has been present since at least firmware 2.2.3.4.

Upgrade to version 3.5.4.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00208 · 10.4th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2026-09-23T04:16Z
References (2)
https://portal.openeye.net/updates/issue-alerts/1058 · [email protected]https://www.securifera.com/advisories/ · [email protected]
EPSS history
Timeline
  • 24 SEP 03:25Z
    EPSS moved — → 0%
    epss
  • 22 SEP 23:10Z
    OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains a hardcoded, undocumented recovery account with a shared credential that cannot be…
    cvelistv5