Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-103097

GV-Eye Relay Payment API Key Vulnerability

Description

An API key is hardcoded and retrievable from the application package. Since Android applications can be reverse engineered, embedding sensitive API credentials directly in the client application may allow unauthorized users to extract and misuse the key.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

GeoVision Inc. GV-Eye

Default version status: unaffected

  • V3.6.0affected
  • V3.7.2unaffected

References