Skip to content

CVE record · 1 source

CVE-2026-124598

CVSS 7.5

An API key is hardcoded and retrievable from the GV-Face package.

Vendor: GeoVision Inc.
Product: GV-Face
CVSS v3.1: 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness: CWE-321
Exposure class: Mobile OS

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

36

CVE NVD 1h ago

An API key is hardcoded and retrievable from the GV-Face package.

An API key is hardcoded and retrievable from the GV-Face package. Since Android applications can be reverse engineered, embedding sensitive API credentials directly in the client application may allow unauthorized users to…

CVSS 7.5 CVE-2026-124598 GeoVision Inc.