CVE-2026-107437
Plaintext Database Password Exposure in GV-E-Map Server V18.2.0A
- State
- Published
- Severity
- 6.2 Medium
- Published
- Oct 12, 2026
- Updated
- Oct 16, 2026
- Reserved
- Oct 8, 2026
Description
GV-E-Map Server V18.2.0A contains a plaintext database password embedded within an application component. The credential can be recovered through static analysis of the distributed binary and may also be exposed in process memory during runtime.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.2 Medium | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | GV |
Weaknesses
- CWE-798 Use of Hard-coded Credentials
Affected Products
| Product | Versions |
|---|---|
GV-E-map ServerGeoVision Inc. |
|
References
- https://www.geovision.com.tw/cyber_security.phpvendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.