← Database

CVE-2026-42370

CRITICAL CVSS: 9.0 Published: 2026-05-04 Modified: 2026-06-17

Description

A stack overflow vulnerability exists in the WebCam Server Login functionality of GeoVision GV-VMS V20 20.0.2. A specially crafted HTTP request can lead to an arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.

Affected Platforms

Geovision Gv-VmsGeovision Gv-Vms Firmware

Weakness Type

CWE-787

References