{"id":"CVE-2026-108983","kind":"vulnerability","aliases":["CVE-2026-108983"],"related":[],"title":"A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe","description":"A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe .","summary":"Unauthenticated OS command injection (CWE-78) in the web server (GeoWebServer.exe, default ports) of GeoVision GV-ASManager on Windows. CVSS 9.8, network, no auth. Allows arbitrary commands as the web server user. Not known exploited; no public PoC found.","severity":"critical","cvss":9.8,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"GV-ASManager","fixed":["6.4.0"],"affected":"6.3.0","ecosystem":"vendor"}],"ecosystems":[],"tags":["command-injection","geovision","geowebserver","gv-asmanager","infrastructure","rce","windows"],"not_affected_if":[],"how_to_check":"On Windows hosts, check the installed GV-ASManager version (about box or Programs and Features). 6.3.0 is affected. Check whether GeoWebServer.exe is running and listening on its default ports, and whether those ports are reachable from untrusted networks.","fix":"Upgrade GV-ASManager to 6.4.0 or later (per the CVE record via third-party mirrors; confirm against GeoVision advisory GV-ASM-2026-10-01). Workaround: restrict network access to the GeoWebServer.exe ports, disable unused ports, change the default ports.","status":"open","published_at":"2026-10-19T02:17:05+00:00","first_seen_at":"2026-10-23T21:57:17+00:00","triaged_at":"2026-10-23T22:04:45+00:00","updated_at":"2026-10-23T23:26:35+00:00","category":"infrastructure","confidence":0.65,"triage":{"at":"2026-10-23T22:04:45Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","impact":"high","summary":"A flaw in the default connection ports of a Web Server process named GeoWebServer.exe is reported, with a CVSS score of 9.8 from NVD. The source does not say what an attacker can do with it beyond that.","category":"infrastructure","who_cares":["windows","geowebserver"],"confidence":0.3,"needs_auth":"unknown","worst_case":"unknown; the sources do not describe the attacker's access","analyst_note":"Check the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-108983 and the vendor of GeoWebServer.exe for the affected versions, the flaw type and the patch.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":[],"user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000429,"input_tokens":2695,"output_tokens":318,"severity_before":"critical"},"analyst_status":"done","analyst_note":"Check the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-108983 and the vendor of GeoWebServer.exe for the affected versions, the flaw type and the patch.","search":"'-108983':17A,20A '-2026':16A,19A '-78':40B '9.8':56B 'allow':60B 'arbitrari':61B 'asmanag':31B,52B 'asmanager':23A 'auth':59B 'command':25B,37B,62B 'command-inject':24B 'connect':8A,82C 'cve':15A,18A 'cvss':55B 'cwe':39B 'default':7A,46B,81C 'exploit':70B 'found':74B 'geovis':27B,49B 'geowebserv':28B 'geowebserver.exe':14A,45B,88C 'gv':22A,30B,51B 'gv-asmanag':29B,50B 'gv-asmanager':21A 'infrastructur':32B 'inject':26B,38B 'known':69B 'name':13A,87C 'network':57B 'os':36B 'poc':73B 'port':9A,47B,83C 'process':12A,86C 'public':72B 'rce':33B 'server':6A,44B,66B,80C 'unauthent':35B 'user':67B 'vulner':2A,76C 'web':5A,43B,65B,79C 'window':34B,54B","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-19T02:17:05+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"0df08a0e-a200-4957-9bb0-084f562506f9","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-108983","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108983","severity":null,"published_at":"2026-10-19T02:17:05+00:00","modified_at":"2026-10-19T21:13:39+00:00","first_seen_at":"2026-10-23T21:57:17+00:00","fetched_at":"2026-10-23T22:28:56+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-108983:442","url":null,"severity":null,"published_at":"2026-10-23T23:26:35+00:00","modified_at":"2026-10-23T23:26:35+00:00","first_seen_at":"2026-10-23T23:26:35+00:00","fetched_at":"2026-10-23T23:26:35+00:00","note":"NVD page empty; read CVE-record mirrors (OpenCVE, IONIX, cvefeed). GeoVision CNA record: GV-ASManager, CWE-78 unauth RCE via GeoWebServer.exe, affected 6.3.0, fixed 6.4.0 (vendor advisory GV-ASM-2026-10-01 per IONIX; GeoVision page itself not found/read). Sources disagree: some list 6.4.0 as affected, some say no fix. No exploitation or PoC found; no social search done."}],"documents":[{"id":1966,"url":"https://app.opencve.io/cve/CVE-2026-108983","title":"CVE-2026-108983 - OpenCVE (mirrors CVE record from GeoVision CNA)","kind":"advisory","source":"analyst","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null},{"id":1967,"url":"https://www.ionix.io/threat-center/cve-2026-108983/","title":"IONIX: CVE-2026-108983 GV-ASManager 6.3.0 OS command injection","kind":"blog","source":"analyst","text":null,"published_at":null,"relation":"describes","confidence":null,"note":null},{"id":1970,"url":"https://cvefeed.io/vuln/detail/CVE-2026-108983","title":"cvefeed: CVE-2026-108983 (mitigation: change default ports)","kind":"other","source":"analyst","text":null,"published_at":null,"relation":"mitigation","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}