CVE-2026-103098
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
GV-Eye Sensitive information exposure in URL query parameter Vulnerability
Transmission of a sensitive key in the URL over an unencrypted HTTP connection. The request is sent over HTTP rather than HTTPS, meaning the key is transmitted in plaintext across the network. An attacker with the ability to monitor network traffic could intercept the request and obtain the key
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
GV-Eye
- Vendor
- GeoVision Inc.
- Product
- GV-Eye
- Platforms
- Android
- Default status
unaffected- Package
- tw.com.geovision.gveye
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| V3.6.0 | affected | Unavailable | Unavailable | Unavailable | None listed |
| V3.7.2 | unaffected | Unavailable | Unavailable | Unavailable | None listed |