← Back to Feed

WolfSSL, GeoVision, VTK vulnerabilities

July 9, 2026 · Talos Intelligence · Severity: HIGH

Cisco Talos disclosed multiple vulnerabilities across three software products: WolfSSL, GeoVision, and VTK-DICOM. WolfSSL, an open-source library for secure data transfer, had three flaws, including improper input validation (CVE-2026-28739, CVE-2026-25106) and an integer underflow (CVE-2026-33091). GeoVision, a security technology provider, was found to have 14 vulnerabilities spanning 37 CVEs, including memory corruption (CVE-2026-12488), OS command injection (CVE-2026-12486), buffer overflows (CVE-2026-12485), and privilege escalation (CVE-2026-42368). VTK-DICOM, a toolkit for medical imaging data, had one heap-based buffer overflow vulnerability (CVE-2026-22879). All vendors have released patches. These vulnerabilities pose significant risks to organizations using affected products. WolfSSL’s flaws could compromise secure communications, while GeoVision’s wide-ranging issues—including command injection and privilege escalation—could allow attackers to take control of security systems. VTK-DICOM’s vulnerability could enable arbitrary code execution in medical imaging applications, potentially impacting healthcare data security. Users of these products should apply patches immediately to mitigate exploitation risks.

WolfSSL, GeoVision, VTK vulnerabilities

Cisco Talos’ Vulnerability Discovery & Research team recently disclosed three vulnerabilities in WolfSSF, fourteen in GeoVision, and one vulnerability in VTK-DICOM.

The vulnerabilities mentioned in this blog post have been patched by their respective vendors, in adherence to Cisco’s third-party vulnerability disclosure policy. 

For Snort coverage that can detect the exploitation of these vulnerabilities, download the latest rule sets from Snort.org, and our latest Vulnerability Advisories are always posted on Talos Intelligence’s website.

WolfSSL vulnerabilities

Discovered by Ankur Tyagi of Cisco Talos.

WolfSSL aims to provide "lightweight and embedded security solutions" for both individual and business needs. WolfSSL is an open-source product to provide secure data transfer.

Talos discovered two improper input validation vulnerabilities (TALOS-2026-2409 (CVE-2026-28739) and TALOS-2026-2410 (CVE-2026-25106)) and one integer underflow vulnerability (TALOS-2026-2408 (CVE-2026-33091)) in WolfSSL.

GeoVision vulnerabilities

Discovered by Philippe Laulheret of Cisco Talos.

GeoVision specializes in security technologies, including cameras and monitoring solutions, access control, and machine-identification.

Talos released 14 advisories for GeoVision vulnerabilities, covering 37 CVEs:

  • TALOS-2026-2411 (CVE-2026-12488) memory corruption vulnerabilities
  • TALOS-2026-2379 (CVE-2026-12486, CVE-2026-12849, CVE-2026-12850, CVE-2026-12851) OS command injection vulnerabilities
  • TALOS-2026-2377 (CVE-2026-12485, CVE-2026-12846, CVE-2026-12847, CVE-2026-12848) buffer overflow vulnerabilities
  • TALOS-2026-2369 (CVE-2026-42370) stack overflow vulnerability
  • TALOS-2026-2333 (CVE-2026-7372, CVE-2026-42369) stack overflow vulnerabilities
  • TALOS-2026-2329 (CVE-2026-42368) privilege escalation vulnerability
  • TALOS-2026-2328 (CVE-2026-42367) privilege escalation vulnerability
  • TALOS-2026-2327 (CVE-2026-7371, CVE-2026-42366) reflected cross-site scripting (XSS) vulnerabilities
  • TALOS-2025-2326 (CVE-2026-42364) OS command injection vulnerability
  • TALOS-2025-2332 (CVE-2026-42365) guessable session cookie vulnerability
  • TALOS-2025-2322 (CVE-2026-7161) insufficient encryption vulnerability
  • TALOS-2026-2375 (CVE-2026-57273, CVE-2026-57274, CVE-2026-57275, CVE-2026-57276, CVE-2026-57277, CVE-2026-57278) stack-based buffer overflow vulnerabilities
  • TALOS-2026-2373 (CVE-2026-13131, CVE-2026-13132, CVE-2026-57264, CVE-2026-57265, CVE-2026-57266, CVE-2026-57267, CVE-2026-57268, CVE-2026-57269, CVE-2026-57270, CVE-2026-57271, CVE-2026-57272) out-of-bounds read vulnerabilities
  • TALOS-2026-2370 (CVE-2026-13125) lack of authentication vulnerability

VTK-DICOM vulnerability

Discovered by Emmanuel Tacheau of Cisco Talos.

The Virtualization Toolkit (VTK) is an open source software solution for handling scientific data, for use in tools for 3D rendering. The VTK-DICOM API is specifically to allow VTK users to parse Digital Imaging and Communications in Medicine (DICOM) medical data.

Talos found one vulnerability in VTK-DICOM, TALOS-2026-2366 (CVE-2026-22879), which is a heap-based buffer overflow vulnerability.

Key Takeaways

  • Cisco Talos disclosed three vulnerabilities in WolfSSL and others.
  • Fourteen vulnerabilities found in GeoVision and VTK products.
  • Prompt patching is critical to mitigate these security risks.
☕ Buy a Coffee