Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 25

Export CSV
CVE-2026-88284

GV-LPC2011/LPC2211 - ONVIF SetUser Repeated-Element Stack-Frame Overflow Denial of Service

GeoVision GV-LPC2211 V1.13 fails to limit repeated User elements in ONVIF SetUser requests, allowing an authenticated administrator to overwrite stack control state and crash the ONVIF worker.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Geovision Inc.
Products
Gv-lpc2011 Lpc2211 Gv-lpc2011 Lpc2211 -
CVE-2026-88272

GV-LPC2011/LPC2211 - Stored Administrator-Username Command Injection

GeoVision GV-LPC2211 V1.13 allows an administrator-controlled username containing shell metacharacters to be executed as arbitrary root commands when the stored username is later deleted.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Geovision Inc.
Products
Gv-lpc2011 Lpc2211
CVE-2026-88271

GV-LPC2011/LPC2211 - SSVR Guest Configuration Overwrite and Administrative Credential Takeover

GeoVision GV-LPC2211 V1.13 allows a Guest user to overwrite device configuration and replace the administrator password through SSVR.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Geovision Inc.
Products
Gv-lpc2011 Lpc2211
CVE-2026-88270

GV-LPC2011/LPC2211 - SSVR Guest Firmware-Mode Pre-Validation Service Teardown Denial of Service

GeoVision GV-LPC2211 V1.13 allows a Guest user to enter SSVR firmware-upgrade mode and disrupt live services before any firmware image is validated.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Geovision Inc.
Products
Gv-lpc2011 Lpc2211
CVE-2026-88289

GV-LPC2011/LPC2211 - Multiple Pre-Authentication Stack Buffer Overflows in VLSVR Request Handlers

GeoVision GV-LPC2211 V1.14 (260903) fails to validate attacker-controlled variable-length fields before copying them into fixed-size stack buffers in multiple VLSVR request handlers, allowing an unauthenticated remote attacker to crash the VLSVR service.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Geovision Inc.
Products
Gv-lpc2011 Lpc2211
CVE-2026-88288

GV-LPC2011/LPC2211 - Arbitrary File Read Through BKDownloadLink.cgi Symlink Creation

GeoVision GV-LPC2211 V1.13 fails to restrict the filename supplied to BKDownloadLink.cgi, allowing a remote user with valid web credentials to read arbitrary files accessible to the root-run web service.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Geovision Inc.
Products
Gv-lpc2011 Lpc2211
CVE-2026-88287

GV-LPC2011/LPC2211 -ONVIF Discovery Probe Scopes Stack-Frame Overflow Denial of Service

GeoVision GV-LPC2211 V1.13 fails to bound the number of Scopes tokens in unauthenticated ONVIF WS-Discovery Probe requests, allowing a remote attacker to corrupt stack control state and crash the discovery process.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Geovision Inc.
Products
Gv-lpc2011 Lpc2211
CVE-2026-88286

GV-LPC2011/LPC2211 - PTZ Connection-State Accept-Loop Denial of Service

GeoVision GV-LPC2211 V1.13 improperly manages PTZ connection state, allowing an unauthenticated remote client to block the accept loop and prevent new PTZ connections.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Geovision Inc.
Products
Gv-lpc2011 Lpc2211
CVE-2026-88285

GV-LPC2011/LPC2211 - Unauthenticated PTZ Control Service

GeoVision GV-LPC2211 V1.13 exposes a network-accessible PTZ control service without authentication, allowing remote clients to retrieve PTZ information and issue PTZ or raw serial commands.

CVSS 3.1 · 9.4 Critical EPSS < 1% KEV · Not listed
Vendors
Geovision Inc.
Products
Gv-lpc2011 Lpc2211
CVE-2026-88283

GV-LPC2011/LPC2211 - ONVIF CreateUsers Repeated-Element Stack-Frame Overflow Denial of Service

GeoVision GV-LPC2211 V1.13 fails to limit repeated User elements in ONVIF CreateUsers requests, allowing an authenticated administrator to overwrite stack control state and crash the ONVIF worker.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Geovision Inc.
Products
Gv-lpc2011 Lpc2211
CVE-2026-88281

GV-LPC2011/LPC2211 - ONVIF DeleteUsers Repeated-Element Stack Overflow Denial of Service

GeoVision GV-LPC2211 V1.13 fails to limit repeated Username elements in ONVIF DeleteUsers requests, allowing an authenticated administrator to overflow a stack array and crash the ONVIF worker.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Geovision Inc.
Products
Gv-lpc2011 Lpc2211
CVE-2026-88280

GV-LPC2011/LPC2211 - ONVIF SetUser Stack-Frame Overflow Denial of Service

GeoVision GV-LPC2211 V1.13 copies an oversized ONVIF SetUser password into a fixed stack field, allowing an authenticated administrator to crash the ONVIF worker.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Geovision Inc.
Products
Gv-lpc2011 Lpc2211
CVE-2026-88279

GV-LPC2011/LPC2211 - ONVIF CreateUsers Username/Password Stack-Frame Overflow Denial of Service

GeoVision GV-LPC2211 V1.13 copies oversized ONVIF CreateUsers username or password values into fixed stack fields, allowing an authenticated administrator to crash the ONVIF worker.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Geovision Inc.
Products
Gv-lpc2011 Lpc2211
CVE-2026-88275

GV-LPC2011/LPC2211 - Wireless WPA-PSK Command Injection

GeoVision GV-LPC2211 V1.13 allows an administrator-controlled WPA-PSK containing shell syntax to execute arbitrary commands as root when wireless configuration is applied.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Geovision Inc.
Products
Gv-lpc2011 Lpc2211
CVE-2026-88274

GV-LPC2011/LPC2211 - Wireless SSID Command Injection

GeoVision GV-LPC2211 V1.13 allows an administrator-controlled wireless SSID containing shell syntax to execute arbitrary commands as root.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Geovision Inc.
Products
Gv-lpc2011 Lpc2211
CVE-2026-88273

GV-LPC2011/LPC2211 - PPPoE Username Shell-Configuration Command Injection

GeoVision GV-LPC2211 V1.13 allows an administrator-controlled PPPoE username to escape a sourced shell configuration assignment and execute arbitrary commands as root.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Geovision Inc.
Products
Gv-lpc2011 Lpc2211
CVE-2026-88290

GV-LPC2011/LPC2211 - Unauthenticated VLSVR Slowloris and Memory Resource Exhaustion

GeoVision GV-LPC2211 V1.14 (260903) allows unauthenticated clients to declare unbounded VLSVR frame lengths and indefinitely delay blocking receives, allowing remote exhaustion of memory, connection, and worker resources.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Geovision Inc.
Products
Gv-lpc2011 Lpc2211
CVE-2026-88269

GV-LPC2011/LPC2211 - SSVR Guest Configuration and Credential Disclosure

GeoVision GV-LPC2211 V1.13 allows a Guest user to retrieve persistent device configuration containing plaintext administrative and user credentials through SSVR.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Geovision Inc.
Products
Gv-lpc2011 Lpc2211
CVE-2026-57872

GV-LPC2011/LPC2211 - unauthorized directory traversal vulnerability (get_fcont.cgi)

An unauthenticated directory traversal vulnerability exists in get_fcont.cgi in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient validation of user-supplied file path input before the requested file is accessed by the CGI component. A remote attacker may exploit this vulnerability by sending a crafted request to read arbitrary files accessible to the affected process, resulting in information disclosure.

CVSS 3.1 · 7.5 High EPSS 1.5% KEV · Not listed
Vendors
Geovision Inc.
Products
Gv-lpc2011 Lpc2211 Gv-lpclpc2011 2211
CVE-2026-42368

GeoVision LPC2011/LPC2211 Web Interface privilege escalation vulnerability

A privilege escalation vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted HTTP request can lead to execute priviledged operation. An attacker can visit a webpage to trigger this vulnerability.

CVSS 3.1 · 9.9 Critical EPSS < 1% KEV · Not listed
Vendors
Geovision Geovision Inc.
Products
Gv-lpc2011 Gv-lpc2011 Firmware Gv-lpc2211 and 2 more