CVE-2026-55863

CVE-2026-55863 affects motionEye (mEye) , a web interface for the motion video surveillance daemon. The root cause is a missing @BaseHandler.auth() decorator on the ActionHandler.post() method in motioneye/handlers/action.py (CWE-862), leaving the /action// endpoint accessible without authenticat...