CVE-2026-12488 is a stack-based buffer overflow vulnerability in the GV-Cloud feature of GeoVision GV-VMS version 20.0.2. An attacker who can impersonate the legitimate server can send a crafted network request that triggers memory corruption, leading to denial of service. The vulnerability does not impact confidentiality or integrity but affects availability. There is no vendor advisory or patch information available at this time, and no known exploits in the wild have been reported.

Successful exploitation results in denial of service due to memory corruption caused by a stack-based buffer overflow. The vulnerability does not directly compromise confidentiality or integrity but can disrupt service availability. Exploitation requires high privileges and user interaction, and the attacker must impersonate the legitimate server.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict network access to the GV-Cloud functionality and monitor for suspicious server impersonation attempts. Avoid using version 20.0.2 where possible.