GV-AC-2026-08-01 - GV-AS1620 Vulnerability
Posted: August 11th, 2026, 10:53 am
Release Date: 2026/08/04
Advisory ID
GV-AC-2026-08-01
CVE ID
CVE-2026-18753, CVE-2026-18754
Affected Product
GV-AS1620 Cloud V1.16 or earlier
GV-AS1620 ASManager V2.07 or earlier
Security Issue
The product firmware contains an embedded, static RSA private key utilized by the Lighttpd web server for TLS termination. Exposure of this private key allows malicious actors to breach the confidentiality and integrity of HTTPS communications, enabling traffic decryption and server spoofing.
Resolution
Reported vulnerability has been resolved with firmware update V1.17 for GV-AS1620 Cloud and V2.08 for GV-ASManager. Update firmware are available to download from GeoVision’s official download page at: Link
If you have any questions or concerns in regards the cybersecurity issue, please contact our cybersecurity team: security@geovision.com.tw.
Advisory ID
GV-AC-2026-08-01
CVE ID
CVE-2026-18753, CVE-2026-18754
Affected Product
GV-AS1620 Cloud V1.16 or earlier
GV-AS1620 ASManager V2.07 or earlier
Security Issue
The product firmware contains an embedded, static RSA private key utilized by the Lighttpd web server for TLS termination. Exposure of this private key allows malicious actors to breach the confidentiality and integrity of HTTPS communications, enabling traffic decryption and server spoofing.
Resolution
Reported vulnerability has been resolved with firmware update V1.17 for GV-AS1620 Cloud and V2.08 for GV-ASManager. Update firmware are available to download from GeoVision’s official download page at: Link
If you have any questions or concerns in regards the cybersecurity issue, please contact our cybersecurity team: security@geovision.com.tw.