MO
Vendor
motioneye-project
9
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-55863 | MO motioneye motioneye-project | 5.3 | Sep 15 | motionEye: Missing authentication on ActionHandler allows unauthenticated camera action execution |
| CVE-2026-46488 | MO motioneye motioneye-project | 9.1 | Sep 15 | motionEye: Authentication possible via password hash |
| CVE-2026-32315 | MO motioneye motioneye-project | 5.5 | Jun 24 | motionEye: World-Readable Configuration File Exposes Admin Password Hash |
| CVE-2026-31978 | MO motioneye motioneye-project | 6.5 | Jun 24 | motionEye: Arbitrary File Read via Path Traversal in Picture/Movie Preview Endpoint |
| CVE-2026-55488 | MO motioneye motioneye-project | 7.7 | Jun 24 | motionEye's Absolute Path Traversal in Media File Handlers Allows Arbitrary File Read |
| CVE-2025-60787 | MO Motioneye Motioneye Project | 7.2 | Oct 3 | MotionEye v0.43.1b4 and before is vulnerable to OS Command Injection in configuration parameters such as image_file_name |
| CVE-2025-47782 | MO motioneye motioneye-project | 8.9 | May 14 | motionEye vulnerable to RCE in add_camera Function Due to unsafe command execution |
| CVE-2022-25568 | MO Motioneye Motioneye Project | 7.5 | Mar 24 | MotionEye v0.42.1 and below allows attackers to access sensitive information via a GET request to /config/list |
| CVE-2021-44255 | MO Motioneye Motioneye Project | 7.2 | Jan 31 | Authenticated remote code execution in MotionEye <= 0.42.1 and MotioneEyeOS <= 20200606 allows a remote attacker to upload a configuration backup file containing a malicious… |