Vulnerabilities

An API key is hardcoded and retrievable from the GV-Access package.

An API key is hardcoded and retrievable from the GV-Access package. Since Android applications can be reverse engineered, embedding sensitive API credentials directly in the client application may allow unauthorized users to extract and misuse the key.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

GeoVision Inc.

Product

GV-Access

CVSS v3.1

6.2 AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness

CWE-798

Exposure class

Mobile OS

NVD status

Received

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-124601 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 29
   CVE NVD 2h ago

   An API key is hardcoded and retrievable from the GV-Cloud application package.

   CVSS 6.2 CVE-2026-124603 GeoVision Inc.
2. 36
   CVE NVD 2h ago

   An API key is hardcoded and retrievable from the GV-Face package.

   CVSS 7.5 CVE-2026-124598 GeoVision Inc.