---
id: "CVE-2026-108983"
kind: "vulnerability"
aliases: ["CVE-2026-108983"]
title: "A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe"
severity: "critical"
cvss: 9.8
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "GV-ASManager", "fixed": ["6.4.0"], "affected": "6.3.0", "ecosystem": "vendor"}]
ecosystems: []
tags: ["command-injection", "geovision", "geowebserver", "gv-asmanager", "infrastructure", "rce", "windows"]
not_affected_if: []
published_at: "2026-10-19T02:17:05+00:00"
first_seen_at: "2026-10-23T21:57:17+00:00"
updated_at: "2026-10-23T23:26:35+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-108983", "first_seen_at": "2026-10-23T21:57:17+00:00"}, {"source": "analyst", "url": null, "first_seen_at": "2026-10-23T23:26:35+00:00"}]
---

# A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe

Unauthenticated OS command injection (CWE-78) in the web server (GeoWebServer.exe, default ports) of GeoVision GV-ASManager on Windows. CVSS 9.8, network, no auth. Allows arbitrary commands as the web server user. Not known exploited; no public PoC found.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:GV-ASManager affected 6.3.0 fixed 6.4.0

## How to check

On Windows hosts, check the installed GV-ASManager version (about box or Programs and Features). 6.3.0 is affected. Check whether GeoWebServer.exe is running and listening on its default ports, and whether those ports are reachable from untrusted networks.

## Fix

Upgrade GV-ASManager to 6.4.0 or later (per the CVE record via third-party mirrors; confirm against GeoVision advisory GV-ASM-2026-10-01). Workaround: restrict network access to the GeoWebServer.exe ports, disable unused ports, change the default ports.

## Timeline

- 2026-10-23T21:57:17+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-108983
- 2026-10-23T23:26:35+00:00 analyst — NVD page empty; read CVE-record mirrors (OpenCVE, IONIX, cvefeed). GeoVision CNA record: GV-ASManager, CWE-78 unauth RCE via GeoWebServer.exe, affected 6.3.0, fixed 6.4.0 (vendor advisory GV-ASM-2026-10-01 per IONIX; GeoVision page itself not found/read). Sources disagree: some list 6.4.0 as affected, some say no fix. No exploitation or PoC found; no social search done.

## Documents

- [advisory] CVE-2026-108983 - OpenCVE (mirrors CVE record from GeoVision CNA) https://app.opencve.io/cve/CVE-2026-108983
- [describes] IONIX: CVE-2026-108983 GV-ASManager 6.3.0 OS command injection https://www.ionix.io/threat-center/cve-2026-108983/
- [mitigation] cvefeed: CVE-2026-108983 (mitigation: change default ports) https://cvefeed.io/vuln/detail/CVE-2026-108983

## From the sources

A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe .

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_