Vulnerabilities

An API key is hardcoded and retrievable from the GV-Cloud application package.

An API key is hardcoded and retrievable from the GV-Cloud application package. Since Android applications can be reverse engineered, embedding sensitive API credentials directly in the client application may allow unauthorized users to extract and misuse the key.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

GeoVision Inc.

Product

GV-Cloud

CVSS v3.1

6.2 AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness

CWE-798

Exposure class

Mobile OS

NVD status

Received

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-124603 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 29
   CVE NVD 2h ago

   An API key is hardcoded and retrievable from the GV-Access package.

   CVSS 6.2 CVE-2026-124601 GeoVision Inc.
2. 36
   CVE NVD 2h ago

   An API key is hardcoded and retrievable from the GV-Face package.

   CVSS 7.5 CVE-2026-124598 GeoVision Inc.