CVE-2026-107437
Received Received - Intake

GV-E-Map Server Plaintext Database Password Exposure

Publication date: 2026-10-12

Last updated on: 2026-10-12

Assigner: GV

Description
GV-E-Map Server V18.2.0A contains a plaintext database password embedded within an application component. The credential can be recovered through static analysis of the distributed binary and may also be exposed in process memory during runtime.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-12
Last Modified
2026-10-12
Generated
2026-10-12
AI Q&A
2026-10-12
EPSS Evaluated
N/A
NVD
CVE-2026-107437
EUVD
EUVD-2026-97163

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
GeoVision Inc. GV-E-map Server 18.2.0A

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-798 The product contains hard-coded credentials, such as a password or cryptographic key.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

GV-E-Map Server V18.2.0A has a plaintext database password embedded in an application component. This password can be extracted by analyzing the binary file or found in process memory during runtime.

Detection Guidance

Static analysis of the GV-E-Map Server V18.2.0A binary may reveal the embedded plaintext database password. Check process memory during runtime for exposed credentials. Use tools like strings, grep, or a debugger to inspect the binary and memory dumps for hardcoded passwords.

Impact Analysis

An attacker could recover the plaintext password and gain unauthorized access to the database. This could lead to data breaches, unauthorized data manipulation, or further exploitation of the system.

Compliance Impact

This vulnerability could violate data protection requirements under GDPR and HIPAA by exposing sensitive data. Organizations may face legal penalties, loss of certification, or reputational damage due to non-compliance with security standards.

Mitigation Strategies

Update to the latest version of GV-E-Map Server if available. Restrict network access to the server to trusted users only. Monitor for unauthorized access attempts. Contact GeoVision support for a patch or workaround.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-107437. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart