CVE-2026-124604
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
47/100
Published: 2026-11-10
Modified: 2026-11-10
First seen: 2026-11-10
Status: active
Attack Surface
Low Complexity
No Auth
No Interaction
Conf. Impact
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
None
UI:
None
S:
Unchanged
C:
High
I:
None
A:
None
Description
The RSA cryptographic key material, including a private key and public key, is embedded within the GV-Cloud application package. Because Android applications can be extracted and reverse engineered, storing private cryptographic keys directly inside the client application may allow an attacker to recover the keys and potentially use them to impersonate the application, decrypt protected data, or generate unauthorized cryptographic operations.
Weakness Classification (1)
Affected Software (1)
| Vendor | Product | Version |
|---|---|---|
| GeoVision Inc. | GV-Cloud | 1.5.1 |