CVE-2026-13125: GeoVision GeoWebPlayer 1.1.1.0 Websocket Server function vulnerability
GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Cloud, ...). It creates a websocket server that expands the capabilities of the various web-interfaces provided by the GeoVision software and may be necessary for them to function properly.
In order to access the websocket server, no authentication is required. As such, any malicious website can attempt to open a connection to the server and potentially access sensitive APIs. In particular, it's possible to call a combination of the create method and getScreenCapture to retrieve the content of the user's screen.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
GeoVision GeoWebPlayer Websocket Serverto a version that resolves this vulnerability.Fixed in 1.1.3.0
Event History
Frequently Asked Questions
What is the severity of CVE-2026-13125?
CVE-2026-13125 has a severity rating of 8.8, indicating a high risk.
What type of vulnerability is CVE-2026-13125?
CVE-2026-13125 pertains to a websocket server function vulnerability in GeoVision GeoWebPlayer 1.1.1.0.
How does CVE-2026-13125 affect users?
CVE-2026-13125 can allow unauthorized access and potential manipulation of data due to the misconfigured websocket server.
How can I fix CVE-2026-13125?
To mitigate CVE-2026-13125, update the GeoVision GeoWebPlayer to the latest version available or apply any security patches provided by GeoVision.
Is CVE-2026-13125 easy to exploit?
Yes, CVE-2026-13125 can be exploited easily due to its low access complexity, requiring no privileged access.