What is the CVSS score of CVE-2026-57272?

CVE-2026-57272 has a CVSS 3.1 base score of 8.3 (High). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of GeoVision GeoWebPlayer are affected by CVE-2026-57272?

GeoVision's GeoWebPlayer add-on for GV-VMS and GV-Cloud contains a memory corruption vulnerability (CVSS 8.3) exploitable through malicious web pages.

How to fix or mitigate CVE-2026-57272?

24 hours: Inventory all GeoVision deployments using GeoWebPlayer/Web Plugin; assess network exposure and user access patterns. 7 days: Implement network segmentation to restrict WebSocket communication from untrusted sources; if feasible, disable the add-on for non-critical systems pending patch availability. 30 days: Establish monitoring for GeoVision security advisories; develop contingency plan including alternative access methods or version migration if compensating controls prove insufficient.

GeoVision GeoWebPlayer CVE-2026-57272

EUVD-2026-41234 HIGH

Improper Validation of Array Index (CWE-129)

2026-07-02 GV

GHSA-6hp2-v2g6-wg25

Authentication Bypass Geowebplayer

8.3

CVSS 3.1 · Vendor: GV

Severity by source

Vendor (GV) PRIMARY

8.3 HIGH

AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

vuln.today AI

8.3 HIGH

A malicious page reaches the local WebSocket via the victim's browser, so AV:N with UI:R and no auth (PR:N); the unchecked-index primitive is non-trivial to weaponize (AC:H) and memory corruption crossing the browser/host boundary yields S:C with C/I/A:H.

3.1 AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

4.0 AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (GV).

CVSS VectorVendor: GV

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 02, 2026 - 03:51 vuln.today

DescriptionCVE.org

GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Cloud, ...). It creates a websocket server that expands the capabilities of the various web-interfaces provided by the GeoVision software and may be necessary for them to function properly.

The Websocket server can accept various commands coming from localhost. Many of the commands will take an index value that is then used to access various arrays to enter critical sections, perform various actions via function calls, etc. However the index value is usually not checked for valid range, and as such it can be used to access multiple arrays out-of-bound.

byPass command index-out-of-bound

AnalysisAI

Out-of-bounds array access in GeoVision's GeoWebPlayer add-on (also branded 'Web Plugin' for GV-VMS and 'WS Player' for VMS-Cloud) lets an attacker abuse the 'byPass' WebSocket command by supplying an unchecked 'index' value, corrupting memory to achieve high-impact compromise (CVSS 8.3). The bundled component runs a local WebSocket server for GeoVision web interfaces (GV-VMS, GV-Cloud); because the server is reachable from a victim's browser, a malicious web page can drive the flaw with only user interaction and no authentication. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Lure victim to malicious web page

Delivery

Page opens WebSocket to local GeoWebPlayer server

Exploit

Send 'byPass' command with out-of-range index

Execution

Trigger out-of-bounds array access (CWE-129)

Persist

Corrupt memory / hijack control flow

Impact

Compromise host with high C/I/A impact

Access

Lure victim to malicious web page

Delivery

Page opens WebSocket to local GeoWebPlayer server

Exploit

Send 'byPass' command with out-of-range index

Execution

Trigger out-of-bounds array access (CWE-129)

Persist

Corrupt memory / hijack control flow

Impact

Compromise host with high C/I/A impact

Vulnerability AssessmentAI

Exploitation	Exploitation requires that the GeoWebPlayer add-on (Web Plugin / WS Player) be installed and its local WebSocket server running on the target host, and that a victim user perform an action - visiting an attacker-controlled web page in a browser on that host (UI:R) - that causes a 'byPass' command with an out-of-range 'index' to be sent to the WebSocket. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The published CVSS 3.1 vector (AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H, 8.3 High) reflects a network-reachable but interaction-dependent, high-complexity attack with full confidentiality/integrity/availability impact and a scope change. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	An attacker lures a user who has GeoWebPlayer installed to a malicious or compromised web page; that page's JavaScript opens a WebSocket to the local GeoWebPlayer server and issues a 'byPass' command carrying an out-of-range 'index'. The unchecked index drives an out-of-bounds array access, corrupting memory and enabling attacker-controlled behavior (potential code execution) with high confidentiality, integrity, and availability impact. …
Remediation	No vendor-released patch version is identified in the available data; consult the GeoVision security advisory at https://www.geovision.com.tw/cyber_security.php and the Talos report (https://talosintelligence.com/vulnerability_reports/TALOS-2026-2373) for a fixed release and apply it once published. … Detailed patch versions, workarounds, and compensating controls in full report.