What’s Vulnerable › Vulnerabilities

CVE-2026-103096: GV-Eye Hardcoded API Key Vulnerability

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-02 · updated 2026-10-02
• Weakness: CWE-312

Description

API key is hardcoded and retrievable from the application package. Since Android applications can be reverse engineered, embedding sensitive API credentials directly in the client application may allow unauthorized users to extract and misuse the key.

Affected products

• GeoVision Inc. GV-Eye: V3.6.0

References

• https://www.geovision.com.tw/cyber_security.php

Get alerted when CVE-2026-103096 or the next vulnerability affects your stack