Resolved: CVE Advisory -2026-92930

CVE-2026-92930 is resolved in Apex Server Software version 3.5.4 and later. We strongly recommend all users to update to the latest firmware promptly.

Note: Exploitation requires physical access to the recorder console and use of a privileged password-reset workflow that is not normally exposed to users. Restricting physical access to the device reduces exposure.

Acknowledgements: We would like to thank Ryan Wincey of Securifera https://www.securifera.com/ for his coordinated vulnerability disclosure efforts.