CVE-2026-124600

Vendor

GeoVision Inc.

Product

GV-Face

CVSS v4.0

10.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness

CWE-319

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 33
   CVE NVD 3h ago

   GV-Face transmits sensitive user credentials and related authentication data over unencrypted HTTP connections.

   GV-Face transmits sensitive user credentials and related authentication data over unencrypted HTTP connections. The HTTP traffic is not encrypted, an attacker with the ability to intercept network traffic.

   CVSS 10.0 CVE-2026-124600 GeoVision Inc.