CVE-2026-124600
Unencrypted HTTP Traffic Exposing Sensitive User Credentials in GV-Face Android Application v2.2.1
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
GV-Face transmits sensitive user credentials and related authentication data over unencrypted HTTP connections. The HTTP traffic is not encrypted, an attacker with the ability to intercept network traffic.
| CWE | CWE-319 |
| Vendor | geovision inc. |
| Product | gv-face |
| Published | Nov 10, 2026 |
Stay Ahead of the Next One
Get instant alerts for geovision inc. gv-face
Be the first to know when new unknown vulnerabilities affecting geovision inc. gv-face are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
GeoVision Inc. / GV-Face
2.2.1
References
Credits
Lloyd Lexter Gealon