CVE-2026-103098
GV-Eye Sensitive information exposure in URL query parameter Vulnerability
- State
- Published
- Severity
- 7.5 High
- Published
- Oct 2, 2026
- Updated
- Oct 2, 2026
- Reserved
- Sep 30, 2026
Description
Transmission of a sensitive key in the URL over an unencrypted HTTP connection. The request is sent over HTTP rather than HTTPS, meaning the key is transmitted in plaintext across the network. An attacker with the ability to monitor network traffic could intercept the request and obtain the key
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.5 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | GV |
Weaknesses
- CWE-319 Cleartext transmission of sensitive information
Affected Products
| Product | Versions |
|---|---|
GV-EyeGeoVision Inc. |
|
References
- https://www.geovision.com.tw/cyber_security.phpvendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.