Vendor
Geovision vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 93 vulnerabilities in Geovision: 7 in the last 7 days and 37 in the last 90 days, 27 of them critical and 5 exploited in the wild. The most recent, CVE-2026-124604, was published on 10 November 2026. 3 vulnerabilities in the last four weeks, down 25% on the four before (4). 1 critical against 0. 11 technologies have a page of their own.
- Last 7 days
- 7
- Last 90 days
- 37
- Critical, all time
- 27
- Exploited in the wild
- 5
About Geovision
A manufacturer of video surveillance systems and IP cameras.
Geovision technologies
Latest Geovision vulnerabilities
- CVE-2026-124604: GeoVision GV-Cloud hardcoded RSA key extractionmediumCVSS 6.2
- CVE-2026-124603: GeoVision GV-Cloud hardcoded API key exposuremediumCVSS 6.2
- CVE-2026-124602: GeoVision GV-Access embedded cryptographic key exposuremediumCVSS 6.2
- CVE-2026-124601: GeoVision GV-Access hardcoded API key exposuremediumCVSS 6.2
- CVE-2026-124600: GV-Face cleartext transmission of credentials over HTTPinfo
- CVE-2026-124599: GeoVision GV-Eye hardcoded RSA private keymediumCVSS 6.2
- CVE-2026-124598: GeoVision GV-Face hardcoded API key exposurehighCVSS 7.5
- CVE-2026-108984: GeoVision GeoWebServer insecure default port exposurehighCVSS 7.5
- CVE-2026-108983: GeoVision web server default connection port vulnerabilitycriticalCVSS 9.8
- CVE-2026-107437: GeoVision GV-E-Map Server plaintext database password hardcodingmediumCVSS 6.2EPSS 0.1%
- CVE-2026-103098: GeoVision products sensitive key transmission over unencrypted HTTPhighCVSS 7.5EPSS 0.2%
- CVE-2026-103097: GeoVision application hardcoded API key exposurehighCVSS 7.5EPSS 0.1%
- CVE-2026-103096: GeoVision mobile application hardcoded API key exposurehighCVSS 7.5EPSS 0.1%
- CVE-2026-92838: GeoVision GV-Remote E-Map DLL hijackinghighCVSS 7.8EPSS 0.2%
- CVE-2026-88290: GeoVision GV-LPC2211 unbounded frame length denial of servicehighCVSS 7.5EPSS 0.5%
- CVE-2026-88289: GeoVision GV-LPC2211 stack buffer overflow in VLSVR request handlershighCVSS 7.5EPSS 0.6%
- CVE-2026-88288: GeoVision GV-LPC2211 path traversal in BKDownloadLink.cgimediumCVSS 6.5EPSS 0.5%
- CVE-2026-88287: GeoVision GV-LPC2211 stack overflow in ONVIF WS-DiscoveryhighCVSS 7.5EPSS 0.5%
- CVE-2026-88286: GeoVision GV-LPC2211 PTZ connection state denial of servicehighCVSS 7.5EPSS 0.5%
- CVE-2026-88285: GeoVision GV-LPC2211 unauthenticated PTZ control service accesscriticalCVSS 9.4EPSS 0.5%
- CVE-2026-88284: GeoVision GV-LPC2211 ONVIF SetUser denial of servicemediumCVSS 4.9EPSS 0.4%
- CVE-2026-88283: GeoVision GV-LPC2211 buffer overflow in ONVIF CreateUsersmediumCVSS 4.9EPSS 0.4%
- CVE-2026-88282: GeoVision GV-LPC2211 command injection via FTP usernamehighCVSS 7.2EPSS 0.5%
- CVE-2026-88281: GeoVision GV-LPC2211 stack overflow in ONVIF DeleteUsersmediumCVSS 4.9EPSS 0.4%
- CVE-2026-88280: GeoVision GV-LPC2211 stack buffer overflow in ONVIF SetUsermediumCVSS 4.9EPSS 0.4%
Most severe Geovision vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2024-6047: GeoVision Devices OS Command Injection Vulnerabilitycriticalexploited in the wildCVSS 9.8
- CVE-2024-11120: GeoVision Devices OS Command Injection Vulnerabilitycriticalexploited in the wildCVSS 9.8
- CVE-2017-6862: NETGEAR Multiple Devices Buffer Overflow Vulnerabilitycriticalexploited in the wildCVSS 9.8
- CVE-2015-1187: D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerabilitycriticalexploited in the wildCVSS 9.8
- CVE-2017-5521: NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerabilitycriticalexploited in the wildCVSS 8.1
- CVE-2026-42369: GeoVision GV-VMS stack overflow in gvapi endpointcriticalCVSS 10EPSS 0.2%
- CVE-2026-12848: GeoVision GV-I/O Box 4E stack overflow in DVRSearch DNS fieldcriticalCVSS 10
- CVE-2026-12847: GeoVision GV-I/O Box 4E stack overflow in DVRSearch gateway fieldcriticalCVSS 10
- CVE-2026-12846: GeoVision GV-I/O Box 4E stack overflow in DVRSearch net_mask fieldcriticalCVSS 10
- CVE-2026-12485: GeoVision GV-I/O Box 4E stack overflow in DVRSearch servicecriticalCVSS 10
Vulnerabilities per week
3 vulnerabilities in the last four weeks, down 25% on the four before (4). 1 critical against 0. The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 0 | 0 | |
| 24 Aug 2026 | 0 | 0 | |
| 31 Aug 2026 | 0 | 0 | |
| 7 Sep 2026 | 23 | 2 | |
| 14 Sep 2026 | 1 | 0 | |
| 21 Sep 2026 | 0 | 0 | |
| 28 Sep 2026 | 3 | 0 | |
| 5 Oct 2026 | 0 | 0 | |
| 12 Oct 2026 | 1 | 0 | |
| 19 Oct 2026 | 2 | 1 | |
| 26 Oct 2026 | 0 | 0 | |
| 2 Nov 2026 | 0 | 0 | |
| 9 Nov 2026 | 7 | 0 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many Geovision vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/vendors/geovision)<a href="https://junglewise.ai/threats/vendors/geovision"><img src="https://junglewise.ai/threats/vendors/geovision/badge.svg" alt="Geovision vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/vendors/geovision.json, and this page as text at https://junglewise.ai/threats/vendors/geovision.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Geovision vulnerabilities", https://junglewise.ai/threats/vendors/geovision, 12 November 2026.