Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

CVE detail

CVE-2026-57264

GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Cloud, ...). It creates a websocket server that expands the capabilities of the various web-interfaces provided by the GeoVision software and may be necessary for them to function properly. The Websocket server can accept various commands coming from localhost. Many of the commands will take an `index` value that is then used to access various arrays to enter critical sections, perform various actions via function calls, etc. However the `index` value is usually not checked for valid range, and as such it can be used to access multiple arrays out-of-bound. #### setPIP command index-out-of-bound

CVSS 8.3 · HighBuzz score 28.9

Buzz score

Why this CVE is surfacing

Buzz score total 28.9

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 13.9 · diversity 15.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Mention score
13.9
3 evidence mentions in the snapshot
Diversity score
15.0
3 sources across 3 categories
KEV score
0.0
No KEV entry observed
OTX score
0.0
0 OTX pulses
PoC score
0.0
0 repos · best confidence N/A
Best PoC traction
0
Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions
3
within the 30d window
Peak daily
2
highest bucket

Evidence

Source links by recency

Newest mentions first
3 source links · newest first
  • WolfSSL, GeoVision, VTK vulnerabilitiesCisco Talos

    duct to provide secure data transfer. Talos discovered two improper input validation vulnerabilities ( TALOS-2026-2409 (CVE-2026-28739) and TALOS-2026-2410 (CVE-2026-25106)) and one integer underflow vulnerability ( TALOS-2026-2408 (CVE-2026-33091)) in WolfSSL. GeoVision vulnerabilities Discovered by Philippe Laulheret of Cisco Talos. GeoVision special

    vendorblog.talosintelligence.comJul 9, 2026, 6:52 PM
  • https://www.geovision.com.tw/cyber_security.phpwww.geovision.com.tw

    No excerpt available.

    Vendor Advisorywww.geovision.com.twJul 2, 2026, 4:17 AM
  • https://talosintelligence.com/vulnerability_reports/TALOS-2026-2373talosintelligence.com

    No excerpt available.

    Exploittalosintelligence.comJul 2, 2026, 4:17 AM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

0 repository references · best confidence N/A · max 0 stars
No public PoC repositories have been matched yet.

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence
  • CVE-2026-45799

    Wire provides gRPC and protocol buffers for Android, Kotlin, Swift, and Java. Prior to 6.3.0 and 7.0.0-alpha03, ByteArrayProtoReader32.skipGroup() and ProtoReader.skipGroup() in w…

    CVSS 7.5 · High
    7 mentions
  • CVE-2026-63308

    Helm through 4.2.3, fixed in commit ba6c9a2, contains a denial of service vulnerability in the Files.Lines template helper in pkg/engine/files.go that allows attackers to trigger…

    CVSS 5.3 · Medium
    5 mentions
  • CVE-2026-46377

    Dasel is a command-line tool and library for querying, modifying, and transforming data structures. From 3.0.0 until 3.10.1, the escape sequence handler in (*Tokenizer).parseCurRu…

    CVSS 6.2 · Medium
    3 mentions
  • CVE-2026-50144

    ncnn is a high-performance neural network inference framework optimized for the mobile platform. In commit e54f7b1f88434e1d844ea0551b880a1cfb079ce1 and earlier, ncnn allows an out…

    CVSS 7.1 · High
    2 mentions
  • CVE-2026-24238

    NVIDIA TensorRT for contains a vulnerability where an attacker might cause an improper validation of array index. A successful exploit of this vulnerability might lead to code exe…

    CVSS 7.8 · High
    3 mentions
  • CVE-2026-15685

    Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affec…

    CVSS 7.5 · High
    1 mention