Exploitation observed; activity peaked at 3 mentions and remains active
Recommended action window: Immediate (within 24h)
NVD description
A stack overflow vulnerability exists in the WebCam Server Login functionality of GeoVision GV-VMS V20 20.0.2. A specially crafted HTTP request can lead to an arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger this vulnerability. #### Stack-overflow via unconstrained sscanf The call to `sscanf` at [1] to split the `Buffer` variable into the `username` and `password` variables doesn't limit the size of the extracted content to match the destination buffers' sizes. In this case, if either the username or password decoded from the authorization string exceeds `40` characters (the size the stack variables `username` and `password`) then a stack overflow will occur. The data is controlled by an attacker, but sronger constraints (e.g. no null bytes) may make exploitation harder. A successful attack could lead to full code execution as SYSTEM on the machine running the service.
Priority
HIGH
Exploitation
ACTIVE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
| Date | Total | Labels |
|---|
| 2026-05-04 | 2 | Active Exploitation1General1 |
| 2026-05-14 | 3 | Disclosure1General1PoC1 |
| 2026-05-15 | 1 | Patch1 |
CVE: CVE-2026-7372 CVSS: 9 (3.1) — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory A stack overflow vulnerability exists in the WebCam Server Login functionality of GeoVision GV-VMS V20 20.0.2.
Post summary
The text discloses a critical stack overflow vulnerability in GeoVision GV-VMS V20 20.0.2, but does not report any PoC, exploitation, patch, or false‑positive information.
CRITICAL: CVE-2026-7372 (CVSS 9) — multiple products. CVE: CVE-2026-7372 CVSS: 9 (3.1) — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory
Post summary
The text merely lists the CVE-2026-7372 severity and status without additional context such as PoC, exploits, or mitigation details.
A critical stack overflow vulnerability (CVE-2026-7372) affects GeoVision GV-VMS V20.0.2, allowing unauthenticated attackers to execute code remotely. If you use this system, update or mitigate immediately to protect your network. #Cybersecurity
Post summary
This post announces a critical stack overflow vulnerability (CVE-2026-7372) in GeoVision GV-VMS V20.0.2 that permits remote code execution and urges users to promptly apply updates or mitigations.
https://lyrie.ai/research/research/cve-2026-7372-advisory #lyrie #cybersecurity #CVE #threatintel #zerodayattack
Post summary
The advisory announces CVE‑2026‑7372 as a zero‑day vulnerability, provides a PoC/exploit and technical details, but does not report active exploitation or a patch.
GeoVision GV-VMS V20 WebCam Server Login CVE-2026-7372 is being exploited now—attackers can execute arbitrary code remotely via stack overflow. Patch immediately to mitigate this critical vulnerability. #NerdieNews #CyberSecurity #InfoSec #Vulnerability #WordPress https://t.co/JljD4FZtu0
Post summary
The message reports that CVE-2026-7372 is currently being exploited for remote code execution through a stack overflow, and urges immediately applying patches.
CVE-2026-7372 Stack Overflow in GeoVision GV-VMS V20 20.0.2 WebCam Serve... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7372 Don't wait vulnerability scanning results: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=2
Post summary
The tweet references CVE-2026-7372 and provides a link to vulnerability details, but offers no technical specifics, PoC, or exploit information.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | geovision | gv-vms | 20 | - | - |
| OS | geovision | gv-vms_firmware | - | - | - |