GV-Face vulnerabilities

2 known vulnerabilities in GV-Face from GeoVision. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 10.0 Critical severity

  GV-Face: Cleartext Transmission of Sensitive Information

  CVE-2026-124600Nov 10, 2026GeoVision

  GV-Face transmits sensitive user credentials and related authentication data over unencrypted HTTP connections. The HTTP traffic is not encrypted, an attacker with the ability to intercept network traffic.

• 7.5 High severity

  GV-Face: Use of Hard-coded Cryptographic Key

  CVE-2026-124598Nov 10, 2026GeoVision

  An API key is hardcoded and retrievable from the GV-Face package. Since Android applications can be reverse engineered, embedding sensitive API credentials directly in the client application may allow unauthorized users to extract and misuse the key.