Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 89

Export CSV
CVE-2026-88270

GV-LPC2011/LPC2211 - SSVR Guest Firmware-Mode Pre-Validation Service Teardown Denial of Service

GeoVision GV-LPC2211 V1.13 allows a Guest user to enter SSVR firmware-upgrade mode and disrupt live services before any firmware image is validated.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Geovision Inc.
Products
Gv-lpc2011 Lpc2211
CVE-2026-88289

GV-LPC2011/LPC2211 - Multiple Pre-Authentication Stack Buffer Overflows in VLSVR Request Handlers

GeoVision GV-LPC2211 V1.14 (260903) fails to validate attacker-controlled variable-length fields before copying them into fixed-size stack buffers in multiple VLSVR request handlers, allowing an unauthenticated remote attacker to crash the VLSVR service.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Geovision Inc.
Products
Gv-lpc2011 Lpc2211
CVE-2026-88288

GV-LPC2011/LPC2211 - Arbitrary File Read Through BKDownloadLink.cgi Symlink Creation

GeoVision GV-LPC2211 V1.13 fails to restrict the filename supplied to BKDownloadLink.cgi, allowing a remote user with valid web credentials to read arbitrary files accessible to the root-run web service.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Geovision Inc.
Products
Gv-lpc2011 Lpc2211
CVE-2026-88287

GV-LPC2011/LPC2211 -ONVIF Discovery Probe Scopes Stack-Frame Overflow Denial of Service

GeoVision GV-LPC2211 V1.13 fails to bound the number of Scopes tokens in unauthenticated ONVIF WS-Discovery Probe requests, allowing a remote attacker to corrupt stack control state and crash the discovery process.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Geovision Inc.
Products
Gv-lpc2011 Lpc2211
CVE-2026-88286

GV-LPC2011/LPC2211 - PTZ Connection-State Accept-Loop Denial of Service

GeoVision GV-LPC2211 V1.13 improperly manages PTZ connection state, allowing an unauthenticated remote client to block the accept loop and prevent new PTZ connections.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Geovision Inc.
Products
Gv-lpc2011 Lpc2211
CVE-2026-88285

GV-LPC2011/LPC2211 - Unauthenticated PTZ Control Service

GeoVision GV-LPC2211 V1.13 exposes a network-accessible PTZ control service without authentication, allowing remote clients to retrieve PTZ information and issue PTZ or raw serial commands.

CVSS 3.1 · 9.4 Critical EPSS < 1% KEV · Not listed
Vendors
Geovision Inc.
Products
Gv-lpc2011 Lpc2211
CVE-2026-88283

GV-LPC2011/LPC2211 - ONVIF CreateUsers Repeated-Element Stack-Frame Overflow Denial of Service

GeoVision GV-LPC2211 V1.13 fails to limit repeated User elements in ONVIF CreateUsers requests, allowing an authenticated administrator to overwrite stack control state and crash the ONVIF worker.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Geovision Inc.
Products
Gv-lpc2011 Lpc2211
CVE-2026-88282

GV-LPCLPC2011/2211 - Stored FTP-Username Command Injection

GeoVision GV-LPC2211 V1.13 allows an administrator-controlled FTP username containing shell metacharacters to be executed as arbitrary root commands during a subsequent FTP-account update.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Geovision Inc.
Products
Gv-lpclpc2011 2211
CVE-2026-88281

GV-LPC2011/LPC2211 - ONVIF DeleteUsers Repeated-Element Stack Overflow Denial of Service

GeoVision GV-LPC2211 V1.13 fails to limit repeated Username elements in ONVIF DeleteUsers requests, allowing an authenticated administrator to overflow a stack array and crash the ONVIF worker.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Geovision Inc.
Products
Gv-lpc2011 Lpc2211
CVE-2026-88280

GV-LPC2011/LPC2211 - ONVIF SetUser Stack-Frame Overflow Denial of Service

GeoVision GV-LPC2211 V1.13 copies an oversized ONVIF SetUser password into a fixed stack field, allowing an authenticated administrator to crash the ONVIF worker.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Geovision Inc.
Products
Gv-lpc2011 Lpc2211
CVE-2026-88279

GV-LPC2011/LPC2211 - ONVIF CreateUsers Username/Password Stack-Frame Overflow Denial of Service

GeoVision GV-LPC2211 V1.13 copies oversized ONVIF CreateUsers username or password values into fixed stack fields, allowing an authenticated administrator to crash the ONVIF worker.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Geovision Inc.
Products
Gv-lpc2011 Lpc2211
CVE-2026-88278

GV-LPCLPC2011/2211 - ONVIF WS-Security PasswordDigest Replay

GeoVision GV-LPC2211 V1.13 fails to enforce WS-Security UsernameToken freshness or nonce reuse protection, allowing a captured PasswordDigest token to be replayed for subsequent ONVIF operations.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Geovision Inc.
Products
Gv-lpclpc2011 2211
CVE-2026-88276

GV-LPCLPC2011/2211 - Wireless WEP Key1-Key4 Command Injection

GeoVision GV-LPC2211 V1.13 allows administrator-controlled WEP key values containing shell syntax to execute arbitrary commands as root.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Geovision Inc.
Products
Gv-lpclpc2011 2211
CVE-2026-88275

GV-LPC2011/LPC2211 - Wireless WPA-PSK Command Injection

GeoVision GV-LPC2211 V1.13 allows an administrator-controlled WPA-PSK containing shell syntax to execute arbitrary commands as root when wireless configuration is applied.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Geovision Inc.
Products
Gv-lpc2011 Lpc2211
CVE-2026-88274

GV-LPC2011/LPC2211 - Wireless SSID Command Injection

GeoVision GV-LPC2211 V1.13 allows an administrator-controlled wireless SSID containing shell syntax to execute arbitrary commands as root.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Geovision Inc.
Products
Gv-lpc2011 Lpc2211
CVE-2026-88273

GV-LPC2011/LPC2211 - PPPoE Username Shell-Configuration Command Injection

GeoVision GV-LPC2211 V1.13 allows an administrator-controlled PPPoE username to escape a sourced shell configuration assignment and execute arbitrary commands as root.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Geovision Inc.
Products
Gv-lpc2011 Lpc2211
CVE-2026-88290

GV-LPC2011/LPC2211 - Unauthenticated VLSVR Slowloris and Memory Resource Exhaustion

GeoVision GV-LPC2211 V1.14 (260903) allows unauthenticated clients to declare unbounded VLSVR frame lengths and indefinitely delay blocking receives, allowing remote exhaustion of memory, connection, and worker resources.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Geovision Inc.
Products
Gv-lpc2011 Lpc2211
CVE-2026-88269

GV-LPC2011/LPC2211 - SSVR Guest Configuration and Credential Disclosure

GeoVision GV-LPC2211 V1.13 allows a Guest user to retrieve persistent device configuration containing plaintext administrative and user credentials through SSVR.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Geovision Inc.
Products
Gv-lpc2011 Lpc2211
CVE-2026-88268

GV-LPC2011/LPC2211 - SSVR Fragment-Reassembly Stack Overflow Denial of Service

GeoVision GV-LPC2211 V1.13 contains an authenticated stack buffer overflow in SSVR fragment reassembly that allows a valid user to crash the SSVR service.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Geovision Inc.
Products
Gv-lpclpc2011 2211
CVE-2026-18754

Hardcoded Cryptographic Key on GV-AS1620 Controller Firmware (GV-Cloud)

The product firmware contains an embedded, static RSA private key utilized by the Lighttpd web server for TLS termination. Exposure of this private key allows malicious actors to breach the confidentiality and integrity of HTTPS communications, enabling traffic decryption and server spoofing.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Geovision Inc.
Products
Gv-as1620 (gv-cloud)