Resolved: CVE Advisory -2026-92929

CVE-2026-92929 is resolved in Apex Server Software version 3.5.4 and later. We strongly recommend all users to update to the latest firmware promptly.

Note: Exploitation requires direct access to a non-TLS web interface. Deploying the recorder on a protected network, behind appropriate firewall controls, and restricting access to unencrypted management interfaces reduces exposure.

Acknowledgements: We would like to thank Ryan Wincey of Securifera https://www.securifera.com/ for his coordinated vulnerability disclosure efforts.