Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-107437— Plaintext Database Password Exposure in GV-E-Map Server V18.2.0A

Quick assessment

Affected
GeoVision Inc. GV-E-map Server
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

GV-E-Map 服务器版本 V18.2.0A 的某个应用程序组件中硬编码了以明文形式存储的数据库密码。该凭证可通过静态分析分发的二进制文件进行恢复，并可能在程序运行过程中暴露于进程内存中。

CVSS 6.2 · Medium
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-107437

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Plaintext Database Password Exposure in GV-E-Map Server V18.2.0A
Source: CVE Program / CVE List V5
Vulnerability Description
GV-E-Map Server V18.2.0A contains a plaintext database password embedded within an application component. The credential can be recovered through static analysis of the distributed binary and may also be exposed in process memory during runtime.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
使用硬编码的凭证
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
GeoVision Inc. GV-E-map Server 18.2.0A -

II. Public POCs for CVE-2026-107437

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-107437

请登录查看更多情报信息。

Vendor Pages for CVE-2026-107437 (1)

IV. Related Vulnerabilities

Same vendor: GeoVision Inc.
Same weakness: CWE-798

V. Comments for CVE-2026-107437

No comments yet

Leave a comment