MO
Product
motioneye
9
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 3Low 0
Watch
Add motioneye to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-46488 | 9.1 | Sep 15 | motionEye: Authentication possible via password hash Affected: < 0.44.0 |
| CVE-2025-47782 | 8.9 | May 14 | motionEye vulnerable to RCE in add_camera Function Due to unsafe command execution Affected: >= 0.43.1b1, < 0.43.1b4 |
| CVE-2026-55488 | 7.7 | Jun 24 | motionEye's Absolute Path Traversal in Media File Handlers Allows Arbitrary File Read Affected: < 0.44.0 |
| CVE-2022-25568 | 7.5 | Mar 24 | MotionEye v0.42.1 and below allows attackers to access sensitive information via a GET request to /config/list Affected: through 0.42.1 |
| CVE-2025-60787 | 7.2 | Oct 3 | MotionEye v0.43.1b4 and before is vulnerable to OS Command Injection in configuration parameters such as image_file_name Affected: 0.42.1; 0.43.1; 0.43.1; 0.43.1; 0.43.1 |
| CVE-2021-44255 | 7.2 | Jan 31 | Authenticated remote code execution in MotionEye <= 0.42.1 and MotioneEyeOS <= 20200606 allows a remote attacker to upload a configuration backup file containing a malicious… Affected: before 0.42.1 |
| CVE-2026-31978 | 6.5 | Jun 24 | motionEye: Arbitrary File Read via Path Traversal in Picture/Movie Preview Endpoint Affected: < 0.44.0 |
| CVE-2026-32315 | 5.5 | Jun 24 | motionEye: World-Readable Configuration File Exposes Admin Password Hash Affected: < 0.44.0 |
| CVE-2026-55863 | 5.3 | Sep 15 | motionEye: Missing authentication on ActionHandler allows unauthenticated camera action execution Affected: < 0.44.0 |
Showing 9