CVE-2026-124600

GV-Face transmits sensitive user credentials and related authentication data over unencrypted HTTP connections . Because the HTTP traffic is not encrypted, an attacker with the ability to intercept network traffic can capture this sensitive information. No specific patch version, workaround, or e...

CVE-2026-124598

The GV-Face package contains a hardcoded API key that is retrievable from the client application. Because Android applications can be reverse engineered, an attacker may extract and misuse these sensitive credentials. No specific exploit information or remediation details are provided in the docu...

EUVD-2026-120667

GV-Face transmits sensitive user credentials and related authentication data over unencrypted HTTP connections. The HTTP traffic is not encrypted, an attacker with the ability to intercept network traffic...

EUVD-2026-120660

An API key is hardcoded and retrievable from the GV-Face package. Since Android applications can be reverse engineered, embedding sensitive API credentials directly in the client application may allow unauthorized users to extract and misuse the key...