Skip to content
CVE PROGRAM SOURCE RECORD9.0 Critical

CVE-2026-42370

GeoVision GV-VMS V20 WebCam Server Login stack overflow vulnerability

Description

A stack overflow vulnerability exists in the WebCam Server Login functionality of GeoVision GV-VMS V20 20.0.2. A specially crafted HTTP request can lead to an arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

GeoVision Inc. GV-VMS V20.0.2

Default version status: unaffected

  • 20.0.2affected
  • 20.0.2.10unaffected
  • 20.1.0unaffected

References