CVE-2026-57271 | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documen… | CVSS 8.3 HIGH

Description

GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Cloud, ...). It creates a websocket server that expands the capabilities of the various web-interfaces provided by the GeoVision software and may be necessary for them to function properly. #### pause command index-out-of-bound

Metadata

CVE ID: CVE-2026-57271
State: PUBLISHED
Assigner: GV
Reserved: 2026-06-24 05:48 UTC
Published: 2026-07-02 02:21 UTC
Last updated: 2026-07-02 02:21 UTC
Primary CWE: CWE-129
CWE-129 Improper validation of array index
Vendor / Product: GeoVision Inc. / GeoWebPlayer
Sources: cve.org · NVD

Severity & Metrics

8.3 HIGH CVSS 3.1

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Affected products (1)

Vendor	Product	Platform	Versions
GeoVision Inc.	GeoWebPlayer	Windows,64 bit	V1.1.1.0, V1.1.3.0

Weakness (CWE)

CWE	Source	Description
CWE-129	cna	CWE-129 Improper validation of array index

CVSS scores (1)

Score	Severity	Version	Source	Vector
8.3	HIGH	3.1	cna	CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

References (2)