Exposure of Embedded RSA Keys in Android Application by GeoVision

CVE-2026-124599

What is CVE-2026-124599?

The GV-Eye application contains embedded RSA cryptographic key material, including both private and public keys. Given the ability of attackers to extract and reverse engineer Android applications, this presents a significant risk. Storing sensitive cryptographic keys directly within the application makes them accessible to malicious actors. If compromised, these keys may allow for unauthorized impersonation of the application, decryption of secured data, or generation of unauthorized cryptographic operations, thereby undermining the integrity and security of the application.

References