PT-2026-54876 · Geovision · Geowebplayer

Kelly Patterson + 2 · Published 2026-07-02 · Updated 2026-07-02 · CVE-2026-57271

Mitre

CVSS v3.1

8.3

High

Base vector

AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Cloud, ...). It creates a websocket server that expands the capabilities of the various web-interfaces provided by the GeoVision software and may be necessary for them to function properly.

pause command index-out-of-bound

Fix

Improper Validation of Array Index

Weakness Enumeration

CWE-129

Related Identifiers

CVE-2026-57271

Affected Products

Geowebplayer

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-57271 · Security Note
• https://geovision.com.tw/cyber_security.php · Vendor Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2026-2373 · Note