Remote Code Execution Vulnerability in GeoVision GV-ASWeb
CVE-2025-26264
8.8HIGH
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2025-26264?
GeoVision GV-ASWeb versions 6.1.2.0 and earlier are exposed to a Remote Code Execution vulnerability within the Notification Settings feature. An attacker with 'System Settings' privileges can exploit this flaw to execute arbitrary commands on the server. This could result in unauthorized control over the system, potentially leading to significant security breaches.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.