CVE-2026-107437 — Plaintext Database Password Exposure in GV-E-Map Server V18.2.0A

CVE-2026-107437

Plaintext Database Password Exposure in GV-E-Map Server V18.2.0A PUBLISHED

Description (CNA)

GV-E-Map Server V18.2.0A contains a plaintext database password embedded within an application component. The credential can be recovered through static analysis of the distributed binary and may also be exposed in process memory during runtime.

Affected (CNA)

Vendor / product	Versions
GeoVision Inc. / GV-E-map Server	affected 18.2.0A; unaffected 18.4

CWE

CWE-798

References

https://www.geovision.com.tw/cyber_security.php

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.