CVE-2026-108983
Received Received - Intake

GeoWebServer Default Ports Exposure

Publication date: 2026-10-19

Last updated on: 2026-10-19

Assigner: GV

Description
A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe .

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-19
Last Modified
2026-10-19
Generated
2026-10-19
AI Q&A
2026-10-19
EPSS Evaluated
N/A
NVD
CVE-2026-108983
EUVD
EUVD-2026-104030

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
GeoVision Inc. GV-ASManager 6.3.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-78 The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects GeoWebServer.exe, a process associated with GeoVision Inc.'s GV-ASManager software. It involves default connection ports in the web server, which could allow unauthorized access or control due to improper security configurations.

Detection Guidance

To detect this vulnerability, check if GeoWebServer.exe is running on default web server ports (e.g., 80, 443, 8080). Use commands like 'netstat -ano | findstr GeoWebServer.exe' on Windows or 'ps aux | grep GeoWebServer' on Linux to identify the process and associated ports. Verify if the service is listening on unexpected ports.

Impact Analysis

The vulnerability has a CVSS score of 9.8, indicating a critical risk. It could lead to high impact on confidentiality, integrity, and availability of affected systems. Attackers might exploit it to gain unauthorized access, execute arbitrary code, or disrupt services.

Compliance Impact

The provided CVE data does not specify how this vulnerability impacts compliance with GDPR, HIPAA, or other standards. The vulnerability involves default connection ports in GeoWebServer.exe, but no details are given about data exposure risks or regulatory implications.

Mitigation Strategies

Monitor GeoVision's official cybersecurity page for updates and apply patches immediately when available. Disable default connection ports for GeoWebServer.exe if not in use and restrict network access to the server.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-108983. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart