CVE-2026-92838
GeoVision GV-Remote E-Map dll hijacking vulnerability
- State
- Published
- Severity
- 7.8 High
- Published
- Sep 17, 2026
- Updated
- Sep 17, 2026
- Reserved
- Sep 17, 2026
Description
A DLL hijacking vulnerability exists in the GeoVision GV-Remote E-Map desktop application. The application loads one or more dynamic-link libraries (DLLs) from an unsafe search path, allowing a local attacker to place a malicious DLL in a location searched before the legitimate library location. If successfully exploited, an attacker with local write access to the affected directory could achieve arbitrary code execution in the security context of the GV-Remote E-Map process.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.8 High | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | GV |
Weaknesses
- CWE-427 Uncontrolled Search Path Element
Affected Products
| Product | Versions |
|---|---|
GV-Remote E-mapGeoVision Inc. |
|
References
- https://www.geovision.com.tw/cyber_security.phpvendor-advisory
- https://hackerone.com/reports/1437942third-party-advisory
- https://www.cve.org/CVERecord?id=CVE-2020-26947related
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.