CVE-2025-26264

Name of the Vulnerable Software and Affected Versions GeoVision GV-ASWeb versions 6.1.2.0 and earlier

Description The issue allows an authenticated attacker with "System Settings" privileges to execute arbitrary commands on the server, potentially leading to a full system compromise. This is achieved through the Notification Settings feature.

Recommendations For GeoVision GV-ASWeb versions 6.1.2.0 and earlier, consider restricting access to the Notification Settings feature until a fix is available. As a temporary workaround, limit the privileges of users with "System Settings" access to minimize the risk of exploitation.