7.5Hoch
CVE-2026-103096GV-Eye Hardcoded API Key Vulnerability
Beschreibung
API key is hardcoded and retrievable from the application package. Since Android applications can be reverse engineered, embedding sensitive API credentials directly in the client application may allow unauthorized users to extract and misuse the key.
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| GeoVision Inc. | GV-Eye | V3.6.0, fixed V3.7.2 |
Referenzen und Patches
- https://www.geovision.com.tw/cyber_security.php vendor-advisory