CVE-2025-26264

8.8 highEPSS 24%

High (8.8). EPSS 24% chance of exploitation in the next 30 days.

GeoVision GV-ASWeb with the version 6.1.2.0 or less (fixed in 6.2.0), contains a Remote Code Execution (RCE) vulnerability within its Notification Settings feature. An authenticated attacker with "System Settings" privileges in ASWeb can exploit this flaw to execute arbitrary commands on the server, leading to a full system compromise.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 24% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2025-02-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://github.com/DRAGOWN/CVE-2025-26264
https://www.geovision.com.tw/download/product/GV-ASManager%20%28Access%20Control%29
https://github.com/DRAGOWN/CVE-2025-26264

Check your stack JSON