CVE-2026-103098 — GV-Eye Sensitive information exposure in URL query parameter Vulnerability

CVE-2026-103098

GV-Eye Sensitive information exposure in URL query parameter Vulnerability PUBLISHED

Description (CNA)

Transmission of a sensitive key in the URL over an unencrypted HTTP connection. The request is sent over HTTP rather than HTTPS, meaning the key is transmitted in plaintext across the network. An attacker with the ability to monitor network traffic could intercept the request and obtain the key

Affected (CNA)

Vendor / product	Versions
GeoVision Inc. / GV-Eye	affected V3.6.0; unaffected V3.7.2

CWE

CWE-319

References

https://www.geovision.com.tw/cyber_security.php

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.