CVE-2026-107437CWE-798hardcoded-credentials

CVE-2026-107437

Medium · published October 12, 2026

CVSS v3.1
6.2
EPSS
0%
Percentile
1.4
In the wild
Unconfirmed
What it is

GV-E-Map

Server V18.2.0A contains a plaintext database password embedded within an

application component. The credential can be recovered through static analysis

of the distributed binary and may also be exposed in process memory during

runtime.

The record
Technical detail
CVSS v3.1
6.2 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00114 · 1.4th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2026-10-12T07:17Z
References (1)
https://www.geovision.com.tw/cyber_security.php · 0df08a0e-a200-4957-9bb0-084f562506f9
EPSS history
Timeline
  • 13 OCT 03:28Z
    EPSS moved — → 0%
    epss
  • 12 OCT 02:52Z
    Plaintext Database Password Exposure in GV-E-Map Server V18.2.0A
    cvelistv5
  • 12 OCT 02:52Z
    Plaintext Database Password Exposure in GV-E-Map Server V18.2.0A
    cvelistv5