Vulnerability · Published Oct 12, 2026 · Assigned by GV
CVE-2026-107437Plaintext Database Password Exposure in GV-E-Map Server V18.2.0A
Medium 6.2
In plain English
A medium-severity hard-coded credentials in GV-E-map Server from GeoVision Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 2% of all known vulnerabilities).
Severity (CVSS 3.1)6.2Medium
Exploit odds (30 days)0.1%top 98.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
GV-E-Map Server V18.2.0A contains a plaintext database password embedded within an application component. The credential can be recovered through static analysis of the distributed binary and may also be exposed in process memory during runtime.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| GeoVision Inc. | GV-E-map Server | 18.2.0A |
Weakness: CWE-798 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
References
- https://www.geovision.com.tw/cyber_security.php vendor-advisory