{"id":"CVE-2025-26264","url":"https://www.cyber-defence.io/tools/cve/CVE-2025-26264","generatedAt":"2026-11-03T22:41:46.900Z","title":"GeoVision GV-ASWeb with the version 6.1.2.0 or less (fixed in 6.2.0), contains a Remote Code Execution (RCE) vulnerability within its Notification Settings feature.","description":"GeoVision GV-ASWeb with the version 6.1.2.0 or less (fixed in 6.2.0), contains a Remote Code Execution (RCE) vulnerability within its Notification Settings feature. An authenticated attacker with \"System Settings\" privileges in ASWeb can exploit this flaw to execute arbitrary commands on the server, leading to a full system compromise.","published":"2025-02-27T22:15:39.000Z","lastModified":"2026-06-17T09:01:33.000Z","status":"Deferred","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.1","score":8.8,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-94"],"affected":[],"epss":{"score":0.23783,"percentile":0.97823,"date":"2026-11-02","history":[]},"kev":{"listed":false},"exploits":{"count":1,"verified":false,"firstPublished":"2025-08-26","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":52424,"kind":"exploit","title":"GeoVision ASManager Windows Application 6.1.2.0 - Remote Code Execution (RCE)","url":"https://www.exploit-db.com/exploits/52424","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/remote/52424.txt","file":"exploits/windows/remote/52424.txt","published":"2025-08-26","added":"2025-08-26","updated":"2025-08-26","author":"Giorgi Dograshvili","type":"remote","platform":"windows","port":null,"verified":false,"codes":["CVE-2025-26264"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":"https://github.com/DRAGOWN/CVE-2025-26264"}]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 23.8%, higher than 98% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"https://github.com/DRAGOWN/CVE-2025-26264","source":"cve@mitre.org"},{"url":"https://www.geovision.com.tw/download/product/GV-ASManager%20%28Access%20Control%29","source":"cve@mitre.org"},{"url":"https://github.com/DRAGOWN/CVE-2025-26264","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2025-26264","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}