# Geovision vulnerabilities Source: https://junglewise.ai/threats/vendors/geovision Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 12 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/geovision.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 93 vulnerabilities in Geovision: 7 in the last 7 days and 37 in the last 90 days, 27 of them critical and 5 exploited in the wild. The most recent, CVE-2026-124604, was published on 10 November 2026. 3 vulnerabilities in the last four weeks, down 25% on the four before (4). 1 critical against 0. 11 technologies have a page of their own. ## Counts - Last 7 days: 7 - Last 30 days: 9 - Last 90 days: 37 - All time: 93 (27 critical, 5 exploited in the wild) ## About Geovision A manufacturer of video surveillance systems and IP cameras. ## Latest Geovision vulnerabilities - [CVE-2026-124604: GeoVision GV-Cloud hardcoded RSA key extraction](https://junglewise.ai/threats/cve-2026-124604-the-rsa-cryptographic-key-material-including-a-private-key-and) (medium, CVSS 6.2, published 10 Nov 2026) - [CVE-2026-124603: GeoVision GV-Cloud hardcoded API key exposure](https://junglewise.ai/threats/cve-2026-124603-an-api-key-is-hardcoded-and-retrievable-from-the-gv-cloud) (medium, CVSS 6.2, published 10 Nov 2026) - [CVE-2026-124602: GeoVision GV-Access embedded cryptographic key exposure](https://junglewise.ai/threats/cve-2026-124602-the-rsa-cryptographic-key-material-including-a-private-key-and) (medium, CVSS 6.2, published 10 Nov 2026) - [CVE-2026-124601: GeoVision GV-Access hardcoded API key exposure](https://junglewise.ai/threats/cve-2026-124601-an-api-key-is-hardcoded-and-retrievable-from-the-gv-access) (medium, CVSS 6.2, published 10 Nov 2026) - [CVE-2026-124600: GV-Face cleartext transmission of credentials over HTTP](https://junglewise.ai/threats/cve-2026-124600-gv-face-transmits-sensitive-user-credentials-and-related) (info, published 10 Nov 2026) - [CVE-2026-124599: GeoVision GV-Eye hardcoded RSA private key](https://junglewise.ai/threats/cve-2026-124599-the-rsa-cryptographic-key-material-including-a-private-key-and) (medium, CVSS 6.2, published 10 Nov 2026) - [CVE-2026-124598: GeoVision GV-Face hardcoded API key exposure](https://junglewise.ai/threats/cve-2026-124598-an-api-key-is-hardcoded-and-retrievable-from-the-gv-face-package) (high, CVSS 7.5, published 10 Nov 2026) - [CVE-2026-108984: GeoVision GeoWebServer insecure default port exposure](https://junglewise.ai/threats/cve-2026-108984-a-vulnerability-is-in-web-server-default-connection-ports-under) (high, CVSS 7.5, published 19 Oct 2026) - [CVE-2026-108983: GeoVision web server default connection port vulnerability](https://junglewise.ai/threats/cve-2026-108983-a-vulnerability-is-in-web-server-default-connection-ports-under) (critical, CVSS 9.8, published 19 Oct 2026) - [CVE-2026-107437: GeoVision GV-E-Map Server plaintext database password hardcoding](https://junglewise.ai/threats/cve-2026-107437-gv-e-map-server-v18-2-0a-contains-a-plaintext-database-password) (medium, CVSS 6.2, published 12 Oct 2026) - [CVE-2026-103098: GeoVision products sensitive key transmission over unencrypted HTTP](https://junglewise.ai/threats/cve-2026-103098-transmission-of-a-sensitive-key-in-the-url-over-an-unencrypted) (high, CVSS 7.5, published 2 Oct 2026) - [CVE-2026-103097: GeoVision application hardcoded API key exposure](https://junglewise.ai/threats/cve-2026-103097-an-api-key-is-hardcoded-and-retrievable-from-the-application) (high, CVSS 7.5, published 2 Oct 2026) - [CVE-2026-103096: GeoVision mobile application hardcoded API key exposure](https://junglewise.ai/threats/cve-2026-103096-api-key-is-hardcoded-and-retrievable-from-the-application) (high, CVSS 7.5, published 2 Oct 2026) - [CVE-2026-92838: GeoVision GV-Remote E-Map DLL hijacking](https://junglewise.ai/threats/cve-2026-92838-geovision-gv-remote-e-map-dll-hijacking) (high, CVSS 7.8, published 17 Sep 2026) - [CVE-2026-88290: GeoVision GV-LPC2211 unbounded frame length denial of service](https://junglewise.ai/threats/cve-2026-88290-geovision-gv-lpc2211-unbounded-frame-length-denial-of-service) (high, CVSS 7.5, published 10 Sep 2026) - [CVE-2026-88289: GeoVision GV-LPC2211 stack buffer overflow in VLSVR request handlers](https://junglewise.ai/threats/cve-2026-88289-geovision-gv-lpc2211-stack-buffer-overflow-in-vlsvr-request) (high, CVSS 7.5, published 10 Sep 2026) - [CVE-2026-88288: GeoVision GV-LPC2211 path traversal in BKDownloadLink.cgi](https://junglewise.ai/threats/cve-2026-88288-geovision-gv-lpc2211-path-traversal-in-bkdownloadlink-cgi) (medium, CVSS 6.5, published 10 Sep 2026) - [CVE-2026-88287: GeoVision GV-LPC2211 stack overflow in ONVIF WS-Discovery](https://junglewise.ai/threats/cve-2026-88287-geovision-gv-lpc2211-stack-overflow-in-onvif-ws-discovery) (high, CVSS 7.5, published 10 Sep 2026) - [CVE-2026-88286: GeoVision GV-LPC2211 PTZ connection state denial of service](https://junglewise.ai/threats/cve-2026-88286-geovision-gv-lpc2211-ptz-connection-state-denial-of-service) (high, CVSS 7.5, published 10 Sep 2026) - [CVE-2026-88285: GeoVision GV-LPC2211 unauthenticated PTZ control service access](https://junglewise.ai/threats/cve-2026-88285-geovision-gv-lpc2211-unauthenticated-ptz-control-service-access) (critical, CVSS 9.4, published 10 Sep 2026) - [CVE-2026-88284: GeoVision GV-LPC2211 ONVIF SetUser denial of service](https://junglewise.ai/threats/cve-2026-88284-geovision-gv-lpc2211-onvif-setuser-denial-of-service) (medium, CVSS 4.9, published 10 Sep 2026) - [CVE-2026-88283: GeoVision GV-LPC2211 buffer overflow in ONVIF CreateUsers](https://junglewise.ai/threats/cve-2026-88283-geovision-gv-lpc2211-buffer-overflow-in-onvif-createusers) (medium, CVSS 4.9, published 10 Sep 2026) - [CVE-2026-88282: GeoVision GV-LPC2211 command injection via FTP username](https://junglewise.ai/threats/cve-2026-88282-geovision-gv-lpc2211-command-injection-via-ftp-username) (high, CVSS 7.2, published 10 Sep 2026) - [CVE-2026-88281: GeoVision GV-LPC2211 stack overflow in ONVIF DeleteUsers](https://junglewise.ai/threats/cve-2026-88281-geovision-gv-lpc2211-stack-overflow-in-onvif-deleteusers) (medium, CVSS 4.9, published 10 Sep 2026) - [CVE-2026-88280: GeoVision GV-LPC2211 stack buffer overflow in ONVIF SetUser](https://junglewise.ai/threats/cve-2026-88280-geovision-gv-lpc2211-stack-buffer-overflow-in-onvif-setuser) (medium, CVSS 4.9, published 10 Sep 2026) ## Most severe Geovision vulnerabilities - [CVE-2024-6047: GeoVision Devices OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2024-6047-geovision-devices-os-command-injection-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 7 May 2025) - [CVE-2024-11120: GeoVision Devices OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2024-11120-geovision-devices-os-command-injection-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 7 May 2025) - [CVE-2017-6862: NETGEAR Multiple Devices Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2017-6862-netgear-multiple-devices-buffer-overflow-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 8 Jun 2022) - [CVE-2015-1187: D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2015-1187-d-link-and-trendnet-multiple-devices-remote-code-execution) (critical, exploited in the wild, CVSS 9.8, published 25 Mar 2022) - [CVE-2017-5521: NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability](https://junglewise.ai/threats/cve-2017-5521-netgear-multiple-devices-exposure-of-sensitive-information) (critical, exploited in the wild, CVSS 8.1, published 8 Sep 2022) - [CVE-2026-42369: GeoVision GV-VMS stack overflow in gvapi endpoint](https://junglewise.ai/threats/cve-2026-42369-geovision-gv-vms-stack-overflow-in-gvapi-endpoint) (critical, CVSS 10, published 4 May 2026) - [CVE-2026-12848: GeoVision GV-I/O Box 4E stack overflow in DVRSearch DNS field](https://junglewise.ai/threats/cve-2026-12848-geovision-gv-i-o-box-4e-stack-overflow-in-dvrsearch-dns-field) (critical, CVSS 10, published 24 Jun 2026) - [CVE-2026-12847: GeoVision GV-I/O Box 4E stack overflow in DVRSearch gateway field](https://junglewise.ai/threats/cve-2026-12847-geovision-gv-i-o-box-4e-stack-overflow-in-dvrsearch-gateway-field) (critical, CVSS 10, published 24 Jun 2026) - [CVE-2026-12846: GeoVision GV-I/O Box 4E stack overflow in DVRSearch net_mask field](https://junglewise.ai/threats/cve-2026-12846-geovision-gv-i-o-box-4e-stack-overflow-in-dvrsearch-net-mask) (critical, CVSS 10, published 24 Jun 2026) - [CVE-2026-12485: GeoVision GV-I/O Box 4E stack overflow in DVRSearch service](https://junglewise.ai/threats/cve-2026-12485-geovision-gv-i-o-box-4e-stack-overflow-in-dvrsearch-service) (critical, CVSS 10, published 24 Jun 2026) ## Vulnerabilities per week 3 vulnerabilities in the last four weeks, down 25% on the four before (4). 1 critical against 0. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 23 | 2 | 0 | | 14 Sep 2026 | 1 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 3 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 1 | 0 | 0 | | 19 Oct 2026 | 2 | 1 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 7 | 0 | 0 | ## Geovision technologies - [Geovision GV-LPC2211](https://junglewise.ai/threats/technologies/gv-lpc2211): 39 vulnerabilities - [Geovision GeoWebPlayer](https://junglewise.ai/threats/technologies/geowebplayer): 18 vulnerabilities - [Geovision GV-LPC2011](https://junglewise.ai/threats/technologies/gv-lpc2011): 16 vulnerabilities - [Geovision GV-I/O Box 4E](https://junglewise.ai/threats/technologies/gv-i-o-box-4e): 8 vulnerabilities - [Geovision Gv-Lpc2011 Firmware](https://junglewise.ai/threats/technologies/gv-lpc2011-firmware): 6 vulnerabilities - [Geovision Gv-Lpc2211 Firmware](https://junglewise.ai/threats/technologies/gv-lpc2211-firmware): 6 vulnerabilities - [Geovision Multiple Devices](https://junglewise.ai/threats/technologies/multiple-devices): 5 vulnerabilities - [Geovision GV-VMS](https://junglewise.ai/threats/technologies/gv-vms): 4 vulnerabilities - [Geovision LPC2011 Firmware](https://junglewise.ai/threats/technologies/lpc2011-firmware): 4 vulnerabilities - [Geovision LPC2211 Firmware](https://junglewise.ai/threats/technologies/lpc2211-firmware): 4 vulnerabilities - [Geovision GV-IP Device Utility](https://junglewise.ai/threats/technologies/gv-ip-device-utility): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Geovision vulnerabilities", https://junglewise.ai/threats/vendors/geovision, 12 November 2026.