中文

// CVE · PUBLISHED 2026-08-04

CVE-2026-18754

GeoVision Inc. / GV-AS1620 (GV-Cloud)

9.1 · CVSS 3.1Critical

Description

The product firmware contains an embedded, static RSA private key utilized by the Lighttpd web server for TLS termination. Exposure of this private key allows malicious actors to breach the confidentiality and integrity of HTTPS communications, enabling traffic decryption and server spoofing.

References

Related CVEs

  • CVE-2026-108983GeoVision Inc. / GV-ASManagerCVSS 9.8
  • CVE-2026-60007Eclipse Foundation / Eclipse MiloCVSS 9.1
  • CVE-2026-15721Bilin Software and Informatics Consultancy Inc. / HUMANIST Digital Human ResourcesCVSS 9.8
  • CVE-2026-14804Bilin Software and Informatics Consultancy Inc. / HUMANIST Digital Human ResourcesCVSS 9.1
  • CVE-2026-14175Bilin Software and Informatics Consultancy Inc. / HUMANIST Digital Human ResourcesCVSS 9.8
  • CVE-2026-18753GeoVision Inc. / GV-AS1620 (AS-Manager)CVSS 9.1
  • CVE-2026-66321Microsoft / Microsoft Edge (Chromium-based)CVSS 9.6
  • CVE-2026-48333Adobe / Adobe Campaign ClassicCVSS 9.8

← CVE Index: search every CVE from the last 30 days

This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.