Authentication Vulnerability in GV-Face by GeoVision
CVE-2026-124600

10CRITICAL

Key Information:

Status
Vendor
CVE Published:
10 November 2026

What is CVE-2026-124600?

GV-Face by GeoVision is susceptible to an information exposure vulnerability that allows sensitive user credentials and related authentication data to be transmitted over unencrypted HTTP connections. This lack of encryption permits attackers to intercept network traffic, leading to potential unauthorized access and exploitation of sensitive user information. Users of GV-Face should implement a secure communication protocol to mitigate this vulnerability.

Affected Version(s)

GV-Face Android 2.2.1

GV-Face Android 2.2.2

References

CVSS V4

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Lloyd Lexter Gealon
.