Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-103098— GV-Eye Sensitive information exposure in URL query parameter Vulnerability

Quick assessment

Affected
GeoVision Inc. GV-Eye
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在未经加密的 HTTP 连接中通过 URL 传输敏感密钥。由于请求是通过 HTTP（而非 HTTPS）发送的，该密钥将以明文形式在网络中传输。能够监控网络流量的攻击者可以拦截该请求并获取该密钥。

CVSS 7.5 · High EPSS 0.16% · P5

Affected Version Matrix 2

VendorProduct Version RangeStatus
GeoVision Inc. GV-Eye V3.6.0 affected
V3.7.2 unaffected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-103098

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
GV-Eye Sensitive information exposure in URL query parameter Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
Transmission of a sensitive key in the URL over an unencrypted HTTP connection.  The request is sent over HTTP rather than HTTPS, meaning the key is transmitted in plaintext across the network. An attacker with the ability to monitor network traffic could intercept the request and obtain the key
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
敏感数据的明文传输
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
GeoVision Inc. GV-Eye V3.6.0 -

II. Public POCs for CVE-2026-103098

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-103098

请登录查看更多情报信息。

Vendor Pages for CVE-2026-103098 (1)

Same Patch Batch · GeoVision Inc. · 2026-10-02 · 3 CVEs total

CVE-2026-103097 7.5 HIGH GV-Eye Relay Payment API Key Vulnerability
CVE-2026-103096 7.5 HIGH GV-Eye Hardcoded API Key Vulnerability

IV. Related Vulnerabilities

Same product: GV-Eye
Same vendor: GeoVision Inc.
Same weakness: CWE-319

V. Comments for CVE-2026-103098

No comments yet

Leave a comment