Remote Code Execution Risk in motionEye Software by Amcrest Technologies

CVE-2026-55863

What is CVE-2026-55863?

motionEye (mEye) offers a web interface for managing video surveillance systems, but prior to version 0.44.0, it contains a vulnerability in the ActionHandler.post() method. This flaw allows attackers to interact with the /action/<camera_id>/ endpoint without authentication. An unauthenticated attacker can send requests to trigger critical actions like snapshot capturing and starting or stopping recordings. Furthermore, if admins have set up action scripts, the same endpoint can also manipulate PTZ controls, alarm systems, lighting settings, and more. This vulnerability poses a significant security risk and is mitigated in version 0.44.0.

References