motioneye vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

GHSA-PHV5-334H-MXCWCriticalmotioneye: motionEye Partial Authentication Bypass: Unauthenticated Admin Credential Theft via Path Traversal GHSA-QXVG-H7Q2-HCXHCriticalmotioneye: motionEye: LFI → pass‑the‑hash admin → unsafe restore → unauth action exec (RCE)CVE-2026-55863Mediummotioneye: motionEye's missing authentication on ActionHandler allows unauthenticated camera action execution CVE-2026-55488Highmotioneye: motionEye's Absolute Path Traversal in Media File Handlers Allows Arbitrary File Read CVE-2026-46488Criticalmotioneye: motionEye: Authentication possible via password hash CVE-2026-32315Mediummotioneye: motionEye's World-Readable Configuration File Exposes Admin Password Hash CVE-2026-31978Mediummotioneye: motionEye has an Arbitrary File Read via Path Traversal in Picture/Movie Preview Endpoint CVE-2025-60787Highmotioneye: motionEye vulnerable to RCE via unsanitized motion config parameter CVE-2025-47782Highmotioneye: motionEye vulnerable to RCE in add_camera Function Due to unsafe command execution CVE-2022-25568Highmotioneye: MotionEye allows attackers to access sensitive information CVE-2021-44255Highmotioneye: Unrestricted Upload of File with Dangerous Type in motionEye

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo