Cryptographic Key Exposure in GV-Cloud Application by Geovision

CVE-2026-124604

What is CVE-2026-124604?

The GV-Cloud application from Geovision has a significant vulnerability due to the embedding of RSA cryptographic key material, including both private and public keys, within its application package. Since Android applications can be reverse-engineered, this practice exposes sensitive cryptographic information to potential attackers. If these keys are compromised, an attacker could impersonate the application, decrypt sensitive data, or execute unauthorized cryptographic operations, raising serious security concerns for users.

References