Detections
Analytics
CVE-2025-26264
high
Description
GeoVision GV-ASWeb with the version 6.1.2.0 or less (fixed in 6.2.0), contains a Remote Code Execution (RCE) vulnerability within its Notification Settings feature. An authenticated attacker with "System Settings" privileges in ASWeb can exploit this flaw to execute arbitrary commands on the server, leading to a full system compromise.
References
https://www.geovision.com.tw/download/product/GV-ASManager%20%28Access%20Control%29