6.2Media
CVE-2026-107437Plaintext Database Password Exposure in GV-E-Map Server V18.2.0A
Descripción
GV-E-Map Server V18.2.0A contains a plaintext database password embedded within an application component. The credential can be recovered through static analysis of the distributed binary and may also be exposed in process memory during runtime.
Debilidad (CWE):
CWE-798
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| GeoVision Inc. | GV-E-map Server | 18.2.0A, fixed 18.4 |
Referencias y parches
- https://www.geovision.com.tw/cyber_security.php vendor-advisory