CVE-2026-108983: GV-ASManager Web Server Command Injection Vulnerability
Published Oct 19, 2026
·Updated
A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe .
Affected Software
1 affected component
GeoVision GV-ASManager
Event History
Oct 19, 2026
CVE Published
via MITRE·12:51 AM
Data Sourced
via MITRE·12:51 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What deployments are exposed?
GeoVision GV-ASManager deployments using the Web Server on its default connection ports, under the GeoWebServer.exe process, are the affected scope described.
2
Does exploitation require credentials or user interaction?
The CVSS vector indicates the issue is network-reachable, has low attack complexity, requires no privileges, and requires no user interaction.
3
What impact could successful exploitation have?
The reported CVSS metrics rate confidentiality, integrity, and availability impact as high, indicating an attacker could potentially fully compromise those properties on an affected system.