# cve.now: GeoVision

The newest entries naming GeoVision as an affected vendor (up to 200), of 101 in all, 2 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-124602](https://cve.now/CVE-2026-124602.md): Hardcoded RSA Private Key and Public Key Exposure in GV-Access Android Application v1.6.1 (CVSS 6.2)
- [CVE-2026-124601](https://cve.now/CVE-2026-124601.md): Hardcoded API Key Discovered in GV-Access Android Application v1.6.1 (CVSS 6.2)
- [CVE-2026-124603](https://cve.now/CVE-2026-124603.md): Hardcoded API Key Discovered in GV-Cloud Android Application v1.5.1 (CVSS 6.2)
- [CVE-2026-124604](https://cve.now/CVE-2026-124604.md): Hardcoded RSA Private Key and Public Key Exposure in GV-Cloud Android Application v1.5.1 (CVSS 6.2)
- [CVE-2026-124600](https://cve.now/CVE-2026-124600.md): Unencrypted HTTP Traffic Exposing Sensitive User Credentials in GV-Face Android Application v2.2.1 (CVSS 10.0)
- [CVE-2026-124599](https://cve.now/CVE-2026-124599.md): Hardcoded RSA Private Key and Public Key Exposure in GV-Face Android Application v2.2.1 (CVSS 6.2)
- [CVE-2026-124598](https://cve.now/CVE-2026-124598.md): Hardcoded API Key Discovered in GV-Face Android Application v2.2.1 (CVSS 7.5)
- [CVE-2026-108984](https://cve.now/CVE-2026-108984.md): GV-ASManager Web Server Buffer Overflow Vulnerability (CVSS 7.5)
- [CVE-2026-108983](https://cve.now/CVE-2026-108983.md): GV-ASManager Web Server Command Injection Vulnerability (CVSS 9.8)
- [CVE-2026-107437](https://cve.now/CVE-2026-107437.md): Plaintext Database Password Exposure in GV-E-Map Server V18.2.0A (CVSS 6.2)
- [CVE-2026-103098](https://cve.now/CVE-2026-103098.md): GV-Eye Sensitive information exposure in URL query parameter Vulnerability (CVSS 7.5)
- [CVE-2026-103097](https://cve.now/CVE-2026-103097.md): GV-Eye Relay Payment API Key Vulnerability (CVSS 7.5)
- [CVE-2026-103096](https://cve.now/CVE-2026-103096.md): GV-Eye Hardcoded API Key Vulnerability (CVSS 7.5)
- [CVE-2026-92838](https://cve.now/CVE-2026-92838.md): GeoVision GV-Remote E-Map dll hijacking vulnerability (CVSS 7.8)
- [CVE-2026-88290](https://cve.now/CVE-2026-88290.md): GV-LPC2011/LPC2211 - Unauthenticated VLSVR Slowloris and Memory Resource Exhaustion (CVSS 7.5)
- [CVE-2026-88289](https://cve.now/CVE-2026-88289.md): GV-LPC2011/LPC2211 - Multiple Pre-Authentication Stack Buffer Overflows in VLSVR Request Handlers (CVSS 7.5)
- [CVE-2026-88288](https://cve.now/CVE-2026-88288.md): GV-LPC2011/LPC2211 - Arbitrary File Read Through BKDownloadLink.cgi Symlink Creation (CVSS 6.5)
- [CVE-2026-88287](https://cve.now/CVE-2026-88287.md): GV-LPC2011/LPC2211 -ONVIF Discovery Probe Scopes Stack-Frame Overflow Denial of Service (CVSS 7.5)
- [CVE-2026-88286](https://cve.now/CVE-2026-88286.md): GV-LPC2011/LPC2211 - PTZ Connection-State Accept-Loop Denial of Service (CVSS 7.5)
- [CVE-2026-88285](https://cve.now/CVE-2026-88285.md): GV-LPC2011/LPC2211 - Unauthenticated PTZ Control Service (CVSS 9.4)
- [CVE-2026-88284](https://cve.now/CVE-2026-88284.md): GV-LPC2011/LPC2211 - ONVIF SetUser Repeated-Element Stack-Frame Overflow Denial of Service (CVSS 4.9)
- [CVE-2026-88283](https://cve.now/CVE-2026-88283.md): GV-LPC2011/LPC2211 - ONVIF CreateUsers Repeated-Element Stack-Frame Overflow Denial of Service (CVSS 4.9)
- [CVE-2026-88282](https://cve.now/CVE-2026-88282.md): GV-LPCLPC2011/2211 - Stored FTP-Username Command Injection (CVSS 7.2)
- [CVE-2026-88281](https://cve.now/CVE-2026-88281.md): GV-LPC2011/LPC2211 - ONVIF DeleteUsers Repeated-Element Stack Overflow Denial of Service (CVSS 4.9)
- [CVE-2026-88280](https://cve.now/CVE-2026-88280.md): GV-LPC2011/LPC2211 - ONVIF SetUser Stack-Frame Overflow Denial of Service (CVSS 4.9)
- [CVE-2026-88279](https://cve.now/CVE-2026-88279.md): GV-LPC2011/LPC2211 - ONVIF CreateUsers Username/Password Stack-Frame Overflow Denial of Service (CVSS 4.9)
- [CVE-2026-88278](https://cve.now/CVE-2026-88278.md): GV-LPCLPC2011/2211 - ONVIF WS-Security PasswordDigest Replay (CVSS 9.8)
- [CVE-2026-88277](https://cve.now/CVE-2026-88277.md): GV-LPCLPC2011/2211 - ONVIF Subscribe Address Command Injection (CVSS 8.8)
- [CVE-2026-88276](https://cve.now/CVE-2026-88276.md): GV-LPCLPC2011/2211 - Wireless WEP Key1-Key4 Command Injection (CVSS 7.2)
- [CVE-2026-88275](https://cve.now/CVE-2026-88275.md): GV-LPC2011/LPC2211 - Wireless WPA-PSK Command Injection (CVSS 7.2)
- [CVE-2026-88274](https://cve.now/CVE-2026-88274.md): GV-LPC2011/LPC2211 - Wireless SSID Command Injection (CVSS 7.2)
- [CVE-2026-88273](https://cve.now/CVE-2026-88273.md): GV-LPC2011/LPC2211 - PPPoE Username Shell-Configuration Command Injection (CVSS 7.2)
- [CVE-2026-88272](https://cve.now/CVE-2026-88272.md): GV-LPC2011/LPC2211 - Stored Administrator-Username Command Injection (CVSS 7.2)
- [CVE-2026-88271](https://cve.now/CVE-2026-88271.md): GV-LPC2011/LPC2211 - SSVR Guest Configuration Overwrite and Administrative Credential Takeover (CVSS 8.8)
- [CVE-2026-88270](https://cve.now/CVE-2026-88270.md): GV-LPC2011/LPC2211 - SSVR Guest Firmware-Mode Pre-Validation Service Teardown Denial of Service (CVSS 6.5)
- [CVE-2026-88269](https://cve.now/CVE-2026-88269.md): GV-LPC2011/LPC2211 - SSVR Guest Configuration and Credential Disclosure (CVSS 6.5)
- [CVE-2026-88268](https://cve.now/CVE-2026-88268.md): GV-LPC2011/LPC2211 - SSVR Fragment-Reassembly Stack Overflow Denial of Service (CVSS 6.5)
- [CVE-2026-18755](https://cve.now/CVE-2026-18755.md): GV-ASManager DLL hijacking vulnerability (CVSS 7.3)
- [CVE-2026-18754](https://cve.now/CVE-2026-18754.md): Hardcoded Cryptographic Key on GV-AS1620 Controller Firmware (GV-Cloud) (CVSS 9.1)
- [CVE-2026-18753](https://cve.now/CVE-2026-18753.md): Hardcoded Cryptographic Key on GV-AS1620 Controller Firmware (GV-ASManager) (CVSS 9.1)
- [CVE-2026-16519](https://cve.now/CVE-2026-16519.md): GeoVision GV-IP Device Utility DLL Search Order Hijacking Vulnerability (CVSS 7.3)
- [CVE-2026-57278](https://cve.now/CVE-2026-57278.md): GeoVision GeoWebPlayer Websocket Server connectInfo handler stack-based buffer overflow vulnerability (CVSS 8.3)
- [CVE-2026-57277](https://cve.now/CVE-2026-57277.md): GeoVision GeoWebPlayer Websocket Server connectInfo handler stack-based buffer overflow vulnerability (CVSS 8.3)
- [CVE-2026-57276](https://cve.now/CVE-2026-57276.md): GeoVision GeoWebPlayer Websocket Server connectInfo handler stack-based buffer overflow vulnerability (CVSS 8.3)
- [CVE-2026-57275](https://cve.now/CVE-2026-57275.md): GeoVision GeoWebPlayer Websocket Server connectInfo handler stack-based buffer overflow vulnerability (CVSS 8.3)
- [CVE-2026-57274](https://cve.now/CVE-2026-57274.md): GeoVision GeoWebPlayer Websocket Server connectInfo handler stack-based buffer overflow vulnerability (CVSS 8.3)
- [CVE-2026-57273](https://cve.now/CVE-2026-57273.md): GeoVision GeoWebPlayer Websocket Server connectInfo handler stack-based buffer overflow vulnerability (CVSS 8.3)
- [CVE-2026-57272](https://cve.now/CVE-2026-57272.md): GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability (CVSS 8.3)
- [CVE-2026-57271](https://cve.now/CVE-2026-57271.md): GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability (CVSS 8.3)
- [CVE-2026-57270](https://cve.now/CVE-2026-57270.md): GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability (CVSS 8.3)
- [CVE-2026-57269](https://cve.now/CVE-2026-57269.md): GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability (CVSS 8.3)
- [CVE-2026-57268](https://cve.now/CVE-2026-57268.md): GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability (CVSS 8.3)
- [CVE-2026-57267](https://cve.now/CVE-2026-57267.md): GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability (CVSS 8.3)
- [CVE-2026-57266](https://cve.now/CVE-2026-57266.md): GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability (CVSS 8.3)
- [CVE-2026-57265](https://cve.now/CVE-2026-57265.md): GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability (CVSS 8.3)
- [CVE-2026-57264](https://cve.now/CVE-2026-57264.md): GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability (CVSS 8.3)
- [CVE-2026-13132](https://cve.now/CVE-2026-13132.md): GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability (CVSS 8.3)
- [CVE-2026-13131](https://cve.now/CVE-2026-13131.md): GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability (CVSS 8.3)
- [CVE-2026-13125](https://cve.now/CVE-2026-13125.md): GeoVision GeoWebPlayer 1.1.1.0 Websocket Server function vulnerability (CVSS 8.8)
- [CVE-2026-57881](https://cve.now/CVE-2026-57881.md): GV-LPC2011/LPC2211 - unauthorized stack-based buffer overflow vulnerability (vlsvr) (CVSS 9.8)
- [CVE-2026-57880](https://cve.now/CVE-2026-57880.md): GV-LPC2011/LPC2211 - unauthorized buffer overflow via RTSP Digest username (ssvr) (CVSS 9.8)
- [CVE-2026-57879](https://cve.now/CVE-2026-57879.md): GV-LPC2011/LPC2211 - unauthorized buffer overflow via AuthMode/AuthValue path (ssvr) (CVSS 9.8)
- [CVE-2026-57878](https://cve.now/CVE-2026-57878.md): GV-LPC2011/LPC2211 - unauthorized buffer overflow vulnerability (thttpd) (CVSS 9.8)
- [CVE-2026-57877](https://cve.now/CVE-2026-57877.md): GV-LPC2011/LPC2211 - unauthorized format string vulnerability (vlsvr) (CVSS 8.6)
- [CVE-2026-57876](https://cve.now/CVE-2026-57876.md): GV-LPC2011/LPC2211 - unauthorized out-of-bounds writing vulnerability (onvif.cgi) (CVSS 7.5)
- [CVE-2026-57875](https://cve.now/CVE-2026-57875.md): GV-LPC2011/LPC2211 - unauthorized null pointer dereference vulnerability in packet parsing (CVSS 7.5)
- [CVE-2026-57874](https://cve.now/CVE-2026-57874.md): GV-LPC2011/LPC2211 - unauthorized buffer overflow vulnerability (IEEE8021x\_upload.cgi) (CVSS 7.5)
- [CVE-2026-57873](https://cve.now/CVE-2026-57873.md): GV-LPC2011/LPC2211 - unauthorized null pointer dereference vulnerability (IEEE8021x\_upload.cgi) (CVSS 7.5)
- [CVE-2026-57872](https://cve.now/CVE-2026-57872.md): GV-LPC2011/LPC2211 - unauthorized directory traversal vulnerability (get\_fcont.cgi) (CVSS 7.5)
- [CVE-2026-12851](https://cve.now/CVE-2026-12851.md): GeoVision GV-I/O Box 4E libNetSetObj.so OS command injection vulnerability (CVSS 9.1)
- [CVE-2026-12850](https://cve.now/CVE-2026-12850.md): GeoVision GV-I/O Box 4E libNetSetObj.so OS command injection vulnerability (CVSS 9.1)
- [CVE-2026-12849](https://cve.now/CVE-2026-12849.md): GeoVision GV-I/O Box 4E libNetSetObj.so OS command injection vulnerability (CVSS 9.1)
- [CVE-2026-12486](https://cve.now/CVE-2026-12486.md): GeoVision GV-I/O Box 4E libNetSetObj.so OS command injection vulnerability (CVSS 9.1)
- [CVE-2026-12848](https://cve.now/CVE-2026-12848.md): GeoVision GV-I/O Box DVRSearch buffer overflow vulnerabilities in CMD\_IP\_SET command (CVSS 10.0)
- [CVE-2026-12847](https://cve.now/CVE-2026-12847.md): GeoVision GV-I/O Box DVRSearch buffer overflow vulnerabilities in CMD\_IP\_SET command (CVSS 10.0)
- [CVE-2026-12846](https://cve.now/CVE-2026-12846.md): GeoVision GV-I/O Box DVRSearch buffer overflow vulnerabilities in CMD\_IP\_SET command (CVSS 10.0)
- [CVE-2026-12485](https://cve.now/CVE-2026-12485.md): GeoVision GV-I/O Box DVRSearch buffer overflow vulnerabilities in CMD\_IP\_SET command (CVSS 10.0)
- [CVE-2026-12488](https://cve.now/CVE-2026-12488.md): GeoVision GV-VMS V20 GV-Cloud memory corruption vulnerability (CVSS 6.2)
- [CVE-2026-7841](https://cve.now/CVE-2026-7841.md): GV-ASWeb Remote Code Execution (RCE) vulnerability (CVSS 8.8)
- [CVE-2026-42370](https://cve.now/CVE-2026-42370.md): GeoVision GV-VMS V20 WebCam Server Login stack overflow vulnerability (CVSS 9.0)
- [CVE-2026-7372](https://cve.now/CVE-2026-7372.md): GeoVision GV-VMS V20 WebCam Server Login stack overflow vulnerability (CVSS 9.0)
- [CVE-2026-42369](https://cve.now/CVE-2026-42369.md): GeoVision GV-VMS V20 WebCam Server stack overflow vulnerability (CVSS 10.0)
- [CVE-2026-42368](https://cve.now/CVE-2026-42368.md): GeoVision LPC2011/LPC2211 Web Interface privilege escalation vulnerability (CVSS 9.9)
- [CVE-2026-42367](https://cve.now/CVE-2026-42367.md): GeoVision LPC2011/LPC2211 Web Interface / ssi.cgi privilege escalation vulnerability via leak of Administrator credentials (CVSS 6.5)
- [CVE-2026-7371](https://cve.now/CVE-2026-7371.md): GeoVision LPC2011/LPC2211 Web Interface / ssi.cgi reflected cross-site scripting (XSS) vulnerabilities (CVSS 7.4)
- [CVE-2026-42366](https://cve.now/CVE-2026-42366.md): GeoVision LPC2011/LPC2211 Web Interface / ssi.cgi reflected cross-site scripting (XSS) vulnerabilities (CVSS 7.4)
- [CVE-2026-42365](https://cve.now/CVE-2026-42365.md): GeoVision LPC2011/LPC2211 Web Interface guessable session cookie vulnerability (CVSS 8.6)
- [CVE-2026-42364](https://cve.now/CVE-2026-42364.md): GeoVision LPC2011/LPC2211 Web Interface / DdnsSetting.cgi OS command injection vulnerability (CVSS 9.9)
- [CVE-2026-7161](https://cve.now/CVE-2026-7161.md): GeoVision GV-IP Device Utility Device Authentication insufficient encryption vulnerability (CVSS 9.3)
- [CVE-2026-42363](https://cve.now/CVE-2026-42363.md): GeoVision GV-IP Device Utility Device Authentication insufficient encryption vulnerability (CVSS 9.3)
- [CVE-2026-4606](https://cve.now/CVE-2026-4606.md): GeoVision ERM Improper Privilege Assignment Leads to SYSTEM-Level Privilege (CVSS 10.0)
- [CVE-2021-47795](https://cve.now/CVE-2021-47795.md): GeoVision Geowebserver 5.3.3 - Local FIle Inclusion (CVSS 8.7)
- [CVE-2018-25118](https://cve.now/CVE-2018-25118.md): GeoVision Command Injection RCE via /PictureCatch.cgi (CVSS 10.0)
- [CVE-2024-12553](https://cve.now/CVE-2024-12553.md): GeoVision GV-ASManager Missing Authorization Information Disclosure Vulnerability (CVSS 6.5)
- [CVE-2024-11120](https://cve.now/CVE-2024-11120.md): GeoVision EOL devices - OS Command Injection (CVSS 9.8, KEV)
- [CVE-2024-6047](https://cve.now/CVE-2024-6047.md): GeoVision EOL device - OS Command Injection (CVSS 9.8, KEV)
- [CVE-2023-3638](https://cve.now/CVE-2023-3638.md): GeoVision GV-ADR2701 Improper Authentication (CVSS 9.8)
- [CVE-2020-3931](https://cve.now/CVE-2020-3931.md): GeoVision Door Access Control Device - Buffer overflow vulnerability (CVSS 9.8)
- [CVE-2020-3930](https://cve.now/CVE-2020-3930.md): GeoVision Door Access Control Device - Information disclosure vulnerability (CVSS 4.0)
- [CVE-2020-3929](https://cve.now/CVE-2020-3929.md): GeoVision Door Access Control Device - Shared cryptographic keys (CVSS 5.9)
- [CVE-2020-3928](https://cve.now/CVE-2020-3928.md): GeoVision Door Access Control Device - Hardcoded privileged password (CVSS 6.2)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/geovision
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.