Web Plugin Vulnerability in GeoVision Software Products
CVE-2026-57271

8.3HIGH

Key Information:

Vendor

Geovision Inc.

Status
Geowebplayer
Vendor
CVE Published:
2 July 2026

What is CVE-2026-57271?

The vulnerability in GeoWebPlayer, also referred to as Web Plugin in the GV-VMS documentation, exposes systems to potential risks due to an index-out-of-bound issue. This addon, essential for enhancing the capabilities of various GeoVision software interfaces, creates a websocket server for optimal functionality. However, improper handling of commands can lead to security flaws, affecting the stability and integrity of the system. It is crucial for users to evaluate their installations of affected products and apply necessary security measures.

Affected Version(s)

GeoWebPlayer Windows V1.1.1.0

GeoWebPlayer Windows V1.1.3.0

References

https://www.geovision.com.tw/cyber_security.php
vendor-advisory
https://talosintelligence.com/vulnerability_reports/TALOS...
third-party-advisory

CVSS V3.1

Score:
8.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Philippe Laulheret of Cisco Talos
Kelly Patterson of Cisco Talos
Robert Sherwin of Cisco Talos
.