Critical Vulnerability in GeoVision GV-AS1620: Embedded RSA Private Key Exposure
A critical vulnerability (CVE-2026-18753) with a CVSS score of 9.1 has been discovered in GeoVision's GV-AS1620 (AS-Manager) product. The vulnerability involves an embedded, static RSA private key used for TLS termination by the Lighttpd web server. Exposure of this private key could allow malicious actors to breach the confidentiality and integrity of HTTPS communications. The affected version is V2.07, and a patched version (V2.08) is available. Immediate patching is highly recommended.