CVE-2026-124600

GeoVision Inc. GV-Face

Published 10 Nov 2026 · updated 10 Nov 2026 · Received

10.0 Critical · CVSS 4.0, CNA

Description

GV-Face transmits sensitive user credentials and related authentication data over unencrypted HTTP connections. The HTTP traffic is not encrypted, an attacker with the ability to intercept network traffic.

References