中文

// CVE · PUBLISHED 2026-08-04

CVE-2026-18753

GeoVision Inc. / GV-AS1620 (AS-Manager)

9.1 · CVSS 3.1Critical

Description

The product firmware contains an embedded, static RSA private key utilized by the Lighttpd web server for TLS termination. Exposure of this private key allows malicious actors to breach the confidentiality and integrity of HTTPS communications, enabling traffic decryption and server spoofing.

References

Related CVEs

  • CVE-2026-108983GeoVision Inc. / GV-ASManagerCVSS 9.8
  • CVE-2026-15721Bilin Software and Informatics Consultancy Inc. / HUMANIST Digital Human ResourcesCVSS 9.8
  • CVE-2026-14804Bilin Software and Informatics Consultancy Inc. / HUMANIST Digital Human ResourcesCVSS 9.1
  • CVE-2026-14175Bilin Software and Informatics Consultancy Inc. / HUMANIST Digital Human ResourcesCVSS 9.8
  • CVE-2026-18754GeoVision Inc. / GV-AS1620 (GV-Cloud)CVSS 9.1
  • CVE-2026-66321Microsoft / Microsoft Edge (Chromium-based)CVSS 9.6
  • CVE-2026-48333Adobe / Adobe Campaign ClassicCVSS 9.8
  • CVE-2026-48331Adobe / Adobe Campaign ClassicCVSS 10.0

← CVE Index: search every CVE from the last 30 days

This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.