PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-7161 GeoVision Inc. CVE debrief

CVE-2026-7161 is a critical vulnerability in GeoVision's GV-IP Device Utility 9.0.5. The Device Authentication functionality has insufficient encryption, allowing an attacker on the same LAN to listen to broadcast traffic, decrypt credentials, and gain full control over device configuration. The vulnerability has a CVSS score of 9.3 and was published on May 4, 2026.

Vendor
GeoVision Inc.
Product
GV-IP Device Utility
CVSS
CRITICAL 9.3
CISA KEV
Not listed in stored evidence
Original CVE published
2026-05-04
Original CVE updated
2026-06-15
Advisory published
2026-05-04
Advisory updated
2026-06-15

Who should care

Administrators and users of GeoVision GV-IP Device Utility 9.0.5 should be aware of this critical vulnerability and take immediate action to mitigate the risk.

Technical summary

The vulnerability exists in the Device Authentication functionality of GeoVision GV-IP Device Utility 9.0.5. When interacting with various Geovision devices on the network, the utility sends privileged commands, which require the username and password of the device. In some instances, the command is broadcasted over UDP, and the username/password are encrypted using a cryptographic protocol derived from Blowfish. However, the symmetric key used for encryption is also included in the packet, making the security of the username/password rely only on the 'obscurity' of the encryption scheme.

Defensive priority

High

Recommended defensive actions

  • Apply patches or updates provided by the vendor (see resourceLinkAnnotations 'ref-5')
  • Use secure communication protocols for device authentication
  • Limit access to device configuration to authorized personnel only
  • Monitor network traffic for suspicious activity

Evidence notes

CVE-2026-7161 has a CVSS score of 9.3 and is classified as CRITICAL. The vulnerability was published on May 4, 2026, and last modified on June 15, 2026.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-7161 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-7161

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-7161 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-7161

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Mitigation or vendor reference

    Unverified legacy reference

    URL: https://talosintelligence.com/vulnerability_reports/

    0df08a0e-a200-4957-9bb0-084f562506f9 - Third Party Advisory

  • Mitigation or vendor reference

    Unverified legacy reference

    URL: https://www.geovision.com.tw/cyber_security.php

    0df08a0e-a200-4957-9bb0-084f562506f9 - Vendor Advisory

  • Source reference

    Unverified legacy reference

    URL: https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2322

    af854a3a-2127-422b-91ae-364da2661108

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.