motioneye vulnerabilities and fixes
Recent CVEs affecting motioneye, with upgrade or downgrade steps. 1 tracked.
motioneye has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2025-10-03. Highest priority: CVE-2025-60787 (score 55/100).
- CVE-2025-60787 HIGH 7.2 DOWNGRADE MotionEye v0.43.1b4 and before is vulnerable to OS Command Injection in configuration parameters such as image
FAQ
How do I fix motioneye vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is motioneye being exploited right now?
None of the tracked motioneye CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which motioneye CVE should I patch first?
CVE-2025-60787 currently ranks highest (55/100): MotionEye v0.43.1b4 and before is vulnerable to OS Command Injection in configuration parameters such as image.