CVE-2026-124602

The GV-Access Android application contains RSA cryptographic key material , including both private and public keys , embedded directly within the application package. Because Android applications can be extracted and reverse engineered, an attacker could recover these keys to impersonate the appl...

CVE-2026-124601

The GV-Access package contains a hardcoded API key that is retrievable due to the nature of Android applications being subject to reverse engineering. This vulnerability allows unauthorized users to extract and misuse the sensitive API credentials directly from the client application. No specific...

EUVD-2026-120671

The RSA cryptographic key material, including a private key and public key, is embedded within the GV-Access application package. Because Android applications can be extracted and reverse engineered, storing private cryptographic keys directly inside the client application may allow an attacker t...

EUVD-2026-120670

An API key is hardcoded and retrievable from the GV-Access package. Since Android applications can be reverse engineered, embedding sensitive API credentials directly in the client application may allow unauthorized users to extract and misuse the key...