CVE-2026-107437

Published: Oct 12, 2026Modified: Oct 16, 2026

6.2

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.5 / Impact: 3.6

Source: 0df08a0e-a200-4957-9bb0-084f562506f9 (Secondary)

Description

GV-E-Map Server V18.2.0A contains a plaintext database password embedded within an application component. The credential can be recovered through static analysis of the distributed binary and may also be exposed in process memory during runtime.

Related CWEs

CWE-798

Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

References (1)

https://www.geovision.com.tw/cyber_security.php

Source: 0df08a0e-a200-4957-9bb0-084f562506f9

Timeline

No history available yet.