ExploitPublished
motionEye 0.43.1b4 · RCE
Source Exploit-DB RSS Feed
0
Severity
CriticalRated by Threat Radar
Data as of 10 Apr 2026, 00:24 UTC
What to do
AI-suggested
Until an official fix is available, restrict access to the affected motionEye instance and monitor for suspicious activity related to this vulnerability.
Description
motionEye 0.43.1b4 - RCE
Indicators of compromise
Exploit source code
# Exploit Title: motionEye 0.43.1b4 - RCE
# Exploit PoC: motionEye RCE via client-side validation bypass (safe PoC)
# Filename: motioneye_rce_poc_edb.txt
# Author: prabhatverma47
# Date tested: 2025-05-14 (original test); prepared for submission: 2025-10-11
# Affected Versions: motionEye <= 0.43.1b4
# Tested on: Debian host running Docker; motionEye image ghcr.io/motioneye-project/motioneye:edge
# CVE(s) / References: MITRE/OSV advisories referenced: CVE-2025-60787
#
# Short description:
# Cli…References
Community reviews
Loading reviews…