Skip to content
OpenAdvisories

Vendor

motioneye-project

6 known vulnerabilities.

Products

motioneye 6
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-55863

    motionEye: Missing authentication on ActionHandler allows unauthenticated camera action execution

    motionEye (mEye) is an online interface for a piece of software called "motion," which is a video surveillance program with motion detection. Prior to 0.44.0, the ActionHandler.post() method in motioneye/handlers/action.py lacks the BaseHandler.auth() decorat…

    motioneye-project motioneye motioneye PyPI
  • Medium 5.5
    CVE-2026-32315

    motionEye: World-Readable Configuration File Exposes Admin Password Hash

    motionEye (mEye) is an online interface for motion software, a video surveillance program with motion detection. Versions prior to 0.44.0 create the configuration file /etc/motioneye/motion.conf with 644 permissions (-rw-r--r--), making it readable by any loc…

    motioneye-project motioneye motioneye PyPI
  • Medium 6.5
    CVE-2026-31978

    motionEye: Arbitrary File Read via Path Traversal in Picture/Movie Preview Endpoint

    motionEye (mEye) is an online interface for motion software, which is a video surveillance program with motion detection. Versions prior to 0.44.0 are vulnerable to path traversal in the picture and movie API endpoints, suhc as /picture/{id}/preview/{filename…

    motioneye-project motioneye motioneye PyPI