CriticalCritical vulnerability

CVE-2026-124600 (CVSS 10.0)

NVD · officialPublished Nov 10, 2026Risk 50/100

GV-Face transmits sensitive user credentials and related authentication data over unencrypted HTTP connections. The HTTP traffic is not encrypted, an attacker with the ability to intercept network traffic.

Technical details

CVSS

10.0

AV:NetworkAC:LowPR:NoneUI:None

Evidence and sources

This record is attributed to NVD. Exploitation status and remediation guidance are kept separate from the vulnerability's technical severity.

Open primary source