<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 03 Oct 2026 05:09:49 +0000</lastBuildDate>
    <item>
      <title>CVE-2026-103096 — GV-Eye Hardcoded API Key Vulnerability</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-103096</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; GeoVision Inc. GV-Eye&lt;/p&gt;
&lt;p&gt;API
key is hardcoded and retrievable from the application package. Since Android
applications can be reverse engineered, embedding sensitive API credentials
directly in the client application may allow unauthorized users to extract and
misuse the key.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; GeoVision Inc. GV-Eye&lt;/p&gt;
&lt;p&gt;API
key is hardcoded and retrievable from the application package. Since Android
applications can be reverse engineered, embedding sensitive API credentials
directly in the client application may allow unauthorized users to extract and
misuse the key.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-103096</guid>
    </item>
  </channel>
</rss>
