Search vulnerabilities

Results 3

Export CSV
CVE-2026-7841

GV-ASWeb Remote Code Execution (RCE) vulnerability

A remote code execution vulnerability exists in Notification Settings on GeoVision GV-ASWeb 6.2.0. An authenticated user with System Setting permissions can execute arbitrary commands on the server by sending a crafted HTTP POST request to the ASWebCommon.srf backend endpoint to bypass the frontend restrictions.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed