CVE-2026-13125

Name of the Vulnerable Software and Affected Versions GeoWebPlayer version 1.1.1.0

Description GeoWebPlayer, also known as Web Plugin or WS Player, is an addon for GeoVision software that establishes a websocket server to enhance web-interface capabilities. The websocket server does not require authentication, allowing malicious websites to establish connections and access sensitive APIs. An attacker can use a combination of the create method and the getScreenCapture method to capture and retrieve the content of the user's screen.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.