Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-103096

GV-Eye Hardcoded API Key Vulnerability

Description

API key is hardcoded and retrievable from the application package. Since Android applications can be reverse engineered, embedding sensitive API credentials directly in the client application may allow unauthorized users to extract and misuse the key.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

GeoVision Inc. GV-Eye

Default version status: unaffected

  • V3.6.0affected
  • V3.7.2unaffected

References