CVE Explorer
CVE-2026-4606
GV Edge Recording Manager (ERM) v2.3.1 improperly runs application components with SYSTEM-level privileges, allowing any local user to gain full control of the operating system.
During installation, ERM creates a Windows service that runs under the LocalSystem account.
When the ERM application is launched, related processes are spawned under SYSTEM privileges rather than the security context of the logged-in user.
Functions such as 'Import Data' open a Windows file dialog operating with SY
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
0
Affected products and versions
1 source assertion{"collectionURL":"https://www.geovision.com.tw/download/product/GV%E2%80%90Edge%20Recording%20Manager%20(Windows%20Version)","defaultStatus":"unaffected","packageName":"GV-Edge Recording Manager","platforms":["Windows"],"product":"GV-Edge Recording Manager","vendor":"GeoVision","versions":[{"status":"affected","version":"2.3.1"},{"status":"unaffected","version":"2.3.2"}]}
- cve_program_cvelist_v5affectedurn:baitaphish:normalized-source-record:v2:8e34f03668878b714a07d67452a7193bbd8f493674b30bcab231adacf3ea6d0d · sha256:4838b595b3ff2fec… · /containers/cna/affected/0
Provider-owned CVSS observations
1 source assertion{"metric":{"Automatable":"NO","Recovery":"IRRECOVERABLE","Safety":"NEGLIGIBLE","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":10,"baseSeverity":"CRITICAL","exploitMaturity":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"GREEN","subAvailabilityImpact":"HIGH","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","userInteraction":"NONE","valueDensity":"CONCENTRATED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:N/AU:N/R:I/V:C/RE:M/U:Green","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConf…
- cve_program_cvelist_v5cvssurn:baitaphish:normalized-source-record:v2:8e34f03668878b714a07d67452a7193bbd8f493674b30bcab231adacf3ea6d0d · sha256:4838b595b3ff2fec… · /containers/cna/metrics/0/cvssV4_0
CWE assertions
1 source assertion{"cweId":"CWE-250","description":"CWE-250 Execution with unnecessary privileges","lang":"en","type":"CWE"}
- cve_program_cvelist_v5cweurn:baitaphish:normalized-source-record:v2:8e34f03668878b714a07d67452a7193bbd8f493674b30bcab231adacf3ea6d0d · sha256:4838b595b3ff2fec… · /containers/cna/problemTypes/0/descriptions/0
Source references
1 source assertion{"url":"https://https://www.geovision.com.tw/cyber_security.php"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:8e34f03668878b714a07d67452a7193bbd8f493674b30bcab231adacf3ea6d0d · sha256:4838b595b3ff2fec… · /containers/cna/references/0
Attribution and limitations
- CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →
Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.