CRITICAL 9.1 NVD

CVE-2026-18754

The product firmware contains an embedded, static RSA private key utilized by the Lighttpd web server for TLS termination. Exposure of this private key allows m

The product firmware contains an embedded, static RSA private key utilized by the Lighttpd web server for TLS termination. Exposure of this private key allows malicious actors to breach the confidentiality and integrity of HTTPS communications, enabling traffic decryption and server spoofing.

References

https://www.geovision.com.tw/cyber_security.php

Published: 2026-08-04 · Source: NVD · Feed updated: 2026-08-04

This critical severity vulnerability with a CVSS score of 9.1 was published on 2026-08-04 via NVD.

Risk Timeline

CVE Disclosed2026-08-04 · -1 days ago

Remediation Resources

Official Advisory

www.geovision.com.tw/cyber_security.php

vulnfeed aggregates 9166 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.