Cryptographic Key Exposure in GV-Access Application by GeoVision

CVE-2026-124602

What is CVE-2026-124602?

The GV-Access application developed by GeoVision contains embedded RSA cryptographic key material, including both a private and a public key. This design flaw allows attackers to extract and reverse engineer the Android application, leading to the potential recovery of sensitive cryptographic keys. If compromised, these keys could enable impersonation of the application, unauthorized data decryption, or the execution of illicit cryptographic operations, posing a significant risk to data integrity and security.

References