WebSocket Server Vulnerability in GeoWebPlayer by GeoVision Products
CVE-2026-57270

8.3HIGH

Key Information:

Vendor

Geovision Inc.

Status
Geowebplayer
Vendor
CVE Published:
2 July 2026

What is CVE-2026-57270?

GeoWebPlayer, an add-on for GeoVision software, is vulnerable due to a lack of proper validation for index values in its WebSocket server. This shortcoming could lead to unauthorized access and manipulation of memory locations, potentially compromising the integrity of the GeoVision applications that rely on this plugin. Without sufficient range checks, malicious actors could exploit this vulnerability to execute unintended actions within the application's critical sections.

Affected Version(s)

GeoWebPlayer Windows V1.1.1.0

GeoWebPlayer Windows V1.1.3.0

References

https://www.geovision.com.tw/cyber_security.php
vendor-advisory
https://talosintelligence.com/vulnerability_reports/TALOS...
third-party-advisory

CVSS V3.1

Score:
8.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Philippe Laulheret of Cisco Talos
Kelly Patterson of Cisco Talos
Robert Sherwin of Cisco Talos
.