CVE-2026-103096 — GV-Eye Hardcoded API Key Vulnerability

CVE-2026-103096

GV-Eye Hardcoded API Key Vulnerability PUBLISHED

Description (CNA)

API key is hardcoded and retrievable from the application package. Since Android applications can be reverse engineered, embedding sensitive API credentials directly in the client application may allow unauthorized users to extract and misuse the key.

Affected (CNA)

Vendor / product	Versions
GeoVision Inc. / GV-Eye	affected V3.6.0; unaffected V3.7.2

CWE

CWE-798, CWE-540, CWE-312

References

https://www.geovision.com.tw/cyber_security.php

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.