CVE WATCH / VULNERABILITY DETAIL
CVE-2026-124603
MEDIUMCVSS 6.2NVD feed
Published 10 November 2026 · tracked since 10 November 2026
Description
An API key is hardcoded and retrievable from the GV-Cloud application package. Since Android applications can be reverse engineered, embedding sensitive API credentials directly in the client application may allow unauthorized users to extract and misuse the key.
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-124604 MEDIUM 6.2
- CVE-2026-124602 MEDIUM 6.2
- CVE-2026-124601 MEDIUM 6.2
- CVE-2026-124599 MEDIUM 6.2
- CVE-2026-124598 HIGH 7.5
- CVE-2026-109810 MEDIUM 6.1
- CVE-2026-109799 HIGH 7.5
- CVE-2026-109797 HIGH 7.1
- CVE-2026-107244 HIGH 7.6
- CVE-2026-107243 HIGH 7.6