Cyber Resilience

CVE-2026-57271

High

Published: 02 July 2026

Published
02 July 2026
Modified
02 July 2026
KEV Added
—
Patch
—
CVSS Score v3.1 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
EPSS Score 0.0024 14.3th percentile
Risk Priority 55 floored blend · peak EPSS

Summary

CVE-2026-57271 is a high-severity Improper Validation of Array Index (CWE-129) vulnerability in Com (inferred from references). Its CVSS base score is 8.3 (High).

Operationally, ranked at the 14.3th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

OWASP Top 10 for Web (2025)

A05:2025 Injection

EU & UK References

Vulnerability details

GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Cloud, ...). It creates a websocket server that expands the capabilities of the various…

more

web-interfaces provided by the GeoVision software and may be necessary for them to function properly. #### pause command index-out-of-bound

CWE(s)
CWE-129

Related Threats

CVEs Like This One

CVE-2024-45582Shared CWE-129
CVE-2026-57268Shared CWE-129
CVE-2023-53019Shared CWE-129
CVE-2021-33815Shared CWE-129
CVE-2025-22067Shared CWE-129
CVE-2024-49836Shared CWE-129
CVE-2021-30282Shared CWE-129
CVE-2020-18428Shared CWE-129
CVE-2026-23354Shared CWE-129
CVE-2023-28004Shared CWE-129

Affected Assets

Com
—
inferred from references and description; NVD did not file a CPE for this CVE

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References