Server V18.2.0A contains a plaintext database password embedded within an
application component. The credential can be recovered through static analysis
of the distributed binary and may also be exposed in process memory during
runtime.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| GeoVision Inc. | GV-E-map Server | unaffected |
|
No data.
No data.
No data.
No advisories yet.
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
| Link | Providers |
|---|---|
| https://www.geovision.com.tw/cyber_security.php |
|
Mon, 12 Oct 2026 03:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | GV-E-Map Server V18.2.0A contains a plaintext database password embedded within an application component. The credential can be recovered through static analysis of the distributed binary and may also be exposed in process memory during runtime. | |
| Title | Plaintext Database Password Exposure in GV-E-Map Server V18.2.0A | |
| First Time appeared |
Geovision Inc.
Geovision Inc. gv-e-map Server |
|
| Weaknesses | CWE-798 | |
| CPEs | cpe:2.3:a:geovision_inc.:gv-e-map_server:18.2.0a:*:windows:*:*:*:*:* cpe:2.3:a:geovision_inc.:gv-e-map_server:18.4:*:windows:*:*:*:*:* |
|
| Vendors & Products |
Geovision Inc.
Geovision Inc. gv-e-map Server |
|
| References |
| |
| Metrics |
cvssV3_1
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: GV
Published:
Updated: 2026-10-12T02:52:48.167Z
Reserved: 2026-10-08T01:15:51.532Z
Link: CVE-2026-107437
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-10-12T03:17:17.683
Modified: 2026-10-12T03:17:17.683
Link: CVE-2026-107437
Redhat
No data.
OpenCVE Enrichment
No data.