Description
Transmission of a sensitive key in the URL
over an unencrypted HTTP connection.  The
request is sent over HTTP rather than HTTPS, meaning the key is transmitted in
plaintext across the network. An attacker with the ability to monitor network
traffic could intercept the request and obtain the key
Published: 2026-10-02
Score: 7.5 High
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 02 Oct 2026 01:00:00 +0000

Type Values Removed Values Added
Description Transmission of a sensitive key in the URL over an unencrypted HTTP connection.  The request is sent over HTTP rather than HTTPS, meaning the key is transmitted in plaintext across the network. An attacker with the ability to monitor network traffic could intercept the request and obtain the key
Title GV-Eye Sensitive information exposure in URL query parameter Vulnerability
First Time appeared Geovision Inc.
Geovision Inc. gv-eye
Weaknesses CWE-319
CPEs cpe:2.3:a:geovision_inc.:gv-eye:v3.6.0:*:android:*:*:*:*:*
cpe:2.3:a:geovision_inc.:gv-eye:v3.7.2:*:android:*:*:*:*:*
Vendors & Products Geovision Inc.
Geovision Inc. gv-eye
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}

Subscriptions

Geovision Inc. Gv-eye
cve-icon MITRE

Status: PUBLISHED

Assigner: GV

Published:

Updated: 2026-10-02T00:15:17.848Z

Reserved: 2026-09-30T02:10:02.128Z

Link: CVE-2026-103098

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-02T01:16:43.193

Modified: 2026-10-02T01:16:43.193

Link: CVE-2026-103098

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses
  • CWE-319

    Cleartext Transmission of Sensitive Information