What’s Vulnerable › Vulnerabilities
CVE-2026-103098: GV-Eye Sensitive information exposure in URL query parameter Vulnerability
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-10-02 · updated 2026-10-02
- Weakness: CWE-319
Description
Transmission of a sensitive key in the URL over an unencrypted HTTP connection. The request is sent over HTTP rather than HTTPS, meaning the key is transmitted in plaintext across the network. An attacker with the ability to monitor network traffic could intercept the request and obtain the key
Affected products
- GeoVision Inc. GV-Eye: V3.6.0
References
Get alerted when CVE-2026-103098 or the next vulnerability affects your stack