Geovision Inc Gv-Vms V20.0.2 vulnerabilities

CVE-2026-42369 [CRITICAL] CWE-787 CVE-2026-42369: GV-VMS V20 is a Video Monitoring Software used to gather the feeds of many surveillance cameras and GV-VMS V20 is a Video Monitoring Software used to gather the feeds of many surveillance cameras and manage other security devices. It is a native application accessed locally, but it is also possible to enable remote access via the "WebCam Server" feature. Once enabled, it is possible to access to the management and monitoring feature via a regular

CVE-2026-42370 [CRITICAL] CWE-787 CVE-2026-42370: A stack overflow vulnerability exists in the WebCam Server Login functionality of GeoVision GV-VMS V A stack overflow vulnerability exists in the WebCam Server Login functionality of GeoVision GV-VMS V20 20.0.2. A specially crafted HTTP request can lead to an arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.

CVE-2026-7372 [CRITICAL] CWE-787 CVE-2026-7372: A stack overflow vulnerability exists in the WebCam Server Login functionality of GeoVision GV-VMS V A stack overflow vulnerability exists in the WebCam Server Login functionality of GeoVision GV-VMS V20 20.0.2. A specially crafted HTTP request can lead to an arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger this vulnerability. #### Stack-overflow via unconstrained sscanf The call to `sscanf` at [1] to spli