PT-2026-141268
CVE-2026-124600
·
Published
2026-11-10
·
Updated
2026-11-10
Description by
CVSS 4.0
10
CriticalMetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Name of the Vulnerable Software and Affected Versions
GV-Face Android Application versions prior to 2.2.2
Description
The GV-Face Android application transmits sensitive user credentials and related authentication data over unencrypted HTTP connections. This lack of encryption allows an attacker with the ability to intercept network traffic to read login credentials and authentication data sent in plaintext.
Recommendations
Update to version 2.2.2.
Found an issue in the description? Have something to add? Feel free to write us 👾