CVE-2026-107437
Last modified
CVE-2026-107437 is a medium-severity vulnerability rated 6.2/10 on the CVSS scale. GV-E-Map Server V18.2.0A contains a plaintext database password embedded within an application component. The credential can be recovered through static analysis of the distributed binary and may also be exposed in process memory during runtime.. EPSS estimates a 0.11% chance of exploitation in the next 30 days.
Description
GV-E-Map Server V18.2.0A contains a plaintext database password embedded within an application component. The credential can be recovered through static analysis of the distributed binary and may also be exposed in process memory during runtime.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| GeoVision Inc. | GV-E-map Server | 18.2.0A |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-107437?
How severe is CVE-2026-107437?
How do I fix CVE-2026-107437?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-107431Missing Authorization vulnerability in Crocoblock JetFormBui…7.5
- CVE-2026-107432Missing Authorization vulnerability in NOUS Ouvert Utile et …5.4
- CVE-2026-107433Missing Authorization vulnerability in miniOrange WP OAuth S…6.5
- CVE-2026-107434Subscriber Bypass Vulnerability in MicroPayments <= 3.2.9 ve…5.4
- CVE-2026-107435Improper Neutralization of Input During Web Page Generation …7.1
- CVE-2026-107436Deserialization of Untrusted Data vulnerability in WP Chill …8.8
- CVE-2026-10744IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an…7.5
- CVE-2026-107444A flaw was found in Katello where the Docker Tags repositori…4.3
- CVE-2026-107445A flaw was found in Katello where the Flatpak Remote Reposit…5.4
- CVE-2026-107446containerd overlaybd through 1.0.18 has a do_load_index (LSM…6.8
- CVE-2026-107447The Contest Gallery WordPress plugin before 34.0.1 does not …5.3
- CVE-2026-107448Magic: The Gathering Arena (Windows/Steam client; 2026.59.30…3.4
Are you affected by CVE-2026-107437?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST