Server V18.2.0A contains a plaintext database password embedded within an
application component. The credential can be recovered through static analysis
of the distributed binary and may also be exposed in process memory during
runtime.
Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| GeoVision Inc. | GV-E-map Server | unaffected |
|
No data.
No data.
No data available yet.
No solution or workaround provided in the CVE record.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
| Link | Providers |
|---|---|
| https://www.geovision.com.tw/cyber_security.php |
|
Mon, 12 Oct 2026 03:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | GV-E-Map Server V18.2.0A contains a plaintext database password embedded within an application component. The credential can be recovered through static analysis of the distributed binary and may also be exposed in process memory during runtime. | |
| Title | Plaintext Database Password Exposure in GV-E-Map Server V18.2.0A | |
| First Time appeared |
Geovision Inc.
Geovision Inc. gv-e-map Server |
|
| Weaknesses | CWE-798 | |
| CPEs | cpe:2.3:a:geovision_inc.:gv-e-map_server:18.2.0a:*:windows:*:*:*:*:* cpe:2.3:a:geovision_inc.:gv-e-map_server:18.4:*:windows:*:*:*:*:* |
|
| Vendors & Products |
Geovision Inc.
Geovision Inc. gv-e-map Server |
|
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: GV
Published:
Updated: 2026-10-12T02:52:48.167Z
Reserved: 2026-10-08T01:15:51.532Z
Link: CVE-2026-107437
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-10-12T03:17:17.683
Modified: 2026-10-12T03:17:17.683
Link: CVE-2026-107437
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-10-12T04:30:06Z