Skip to content
OpenAdvisories
Medium · 6.2 CVE-2026-124604 EUVD-2026-120668GHSA-jwqf-mxj2-8583

Hardcoded RSA Private Key and Public Key Exposure in GV-Cloud Android Application v1.5.1

Published Nov 10, 2026 · Updated Nov 12, 2026 · Assigned by GV

Description

The RSA cryptographic key
material, including a private key and public key, is embedded within the GV-Cloud application package. Because Android applications can be extracted and
reverse engineered, storing private cryptographic keys directly inside the
client application may allow an attacker to recover the keys and potentially
use them to impersonate the application, decrypt protected data, or generate
unauthorized cryptographic operations.

Affected products

VendorProductAffectedFixed
GeoVision GV-Cloud 1.5.1 1.5.2

References