What’s Vulnerable › Vulnerabilities
CVE-2026-103097: GV-Eye Relay Payment API Key Vulnerability
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-10-02 · updated 2026-10-02
- Weakness: CWE-312
Description
An API key is hardcoded and retrievable from the application package. Since Android applications can be reverse engineered, embedding sensitive API credentials directly in the client application may allow unauthorized users to extract and misuse the key.
Affected products
- GeoVision Inc. GV-Eye: V3.6.0
References
Get alerted when CVE-2026-103097 or the next vulnerability affects your stack