CVE-2026-103098
GV-Eye Sensitive information exposure in URL query parameter Vulnerability
CVSS Score
7.5
EPSS Score
0.0%
EPSS Percentile
0th
Transmission of a sensitive key in the URL over an unencrypted HTTP connection. The request is sent over HTTP rather than HTTPS, meaning the key is transmitted in plaintext across the network. An attacker with the ability to monitor network traffic could intercept the request and obtain the key
| CWE | CWE-319 |
| Vendor | geovision inc. |
| Product | gv-eye |
| Published | Oct 2, 2026 |
Stay Ahead of the Next One
Get instant alerts for geovision inc. gv-eye
Be the first to know when new high vulnerabilities affecting geovision inc. gv-eye are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Affected Versions
GeoVision Inc. / GV-Eye
V3.6.0
References
Credits
Lloyd Lexter Gealon