Advisories · Technology

GeoVision Inc. GV-LPC2011/LPC2211.

Every CVE that names GeoVision Inc. GV-LPC2011/LPC2211 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-88290 CVE record

CVSS 7.5 High

GV-LPC2011/LPC2211 - Unauthenticated VLSVR Slowloris and Memory Resource Exhaustion
- GeoVision Inc. GV-LPC2011/LPC2211
- Denial of service
Not analysed yet 10 Sept 2026
CVE-2026-88289 CVE record

CVSS 7.5 High

GV-LPC2011/LPC2211 - Multiple Pre-Authentication Stack Buffer Overflows in VLSVR Request Handlers
- GeoVision Inc. GV-LPC2011/LPC2211
- Memory corruption
Not analysed yet 10 Sept 2026
CVE-2026-88288 CVE record

CVSS 6.5 Medium

GV-LPC2011/LPC2211 - Arbitrary File Read Through BKDownloadLink.cgi Symlink Creation
- GeoVision Inc. GV-LPC2011/LPC2211
- Path traversal
Not analysed yet 10 Sept 2026
CVE-2026-88287 CVE record

CVSS 7.5 High

GV-LPC2011/LPC2211 -ONVIF Discovery Probe Scopes Stack-Frame Overflow Denial of Service
- GeoVision Inc. GV-LPC2011/LPC2211
- Memory corruption
Not analysed yet 10 Sept 2026
CVE-2026-88286 CVE record

CVSS 7.5 High

GV-LPC2011/LPC2211 - PTZ Connection-State Accept-Loop Denial of Service
- GeoVision Inc. GV-LPC2011/LPC2211
- Denial of service
Not analysed yet 10 Sept 2026
CVE-2026-88285 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

GV-LPC2011/LPC2211 - Unauthenticated PTZ Control Service
- GeoVision Inc. GV-LPC2011/LPC2211
- Authentication bypass
Not analysed yet 10 Sept 2026
CVE-2026-88284 CVE record

CVSS 4.9 Medium

GV-LPC2011/LPC2211 - ONVIF SetUser Repeated-Element Stack-Frame Overflow Denial of Service
- GeoVision Inc. GV-LPC2011/LPC2211 -
- Memory corruption
Not analysed yet 10 Sept 2026
CVE-2026-88283 CVE record

CVSS 4.9 Medium

GV-LPC2011/LPC2211 - ONVIF CreateUsers Repeated-Element Stack-Frame Overflow Denial of Service
- GeoVision Inc. GV-LPC2011/LPC2211
- Memory corruption
Not analysed yet 10 Sept 2026
CVE-2026-88281 CVE record

CVSS 4.9 Medium

GV-LPC2011/LPC2211 - ONVIF DeleteUsers Repeated-Element Stack Overflow Denial of Service
- GeoVision Inc. GV-LPC2011/LPC2211
- Memory corruption
Not analysed yet 10 Sept 2026
CVE-2026-88280 CVE record

CVSS 4.9 Medium

GV-LPC2011/LPC2211 - ONVIF SetUser Stack-Frame Overflow Denial of Service
- GeoVision Inc. GV-LPC2011/LPC2211
- Memory corruption
Not analysed yet 10 Sept 2026
CVE-2026-88279 CVE record

CVSS 4.9 Medium

GV-LPC2011/LPC2211 - ONVIF CreateUsers Username/Password Stack-Frame Overflow Denial of Service
- GeoVision Inc. GV-LPC2011/LPC2211
- Memory corruption
Not analysed yet 10 Sept 2026
CVE-2026-88275 CVE record

CVSS 7.2 High

GV-LPC2011/LPC2211 - Wireless WPA-PSK Command Injection
- GeoVision Inc. GV-LPC2011/LPC2211
- Command injection
Not analysed yet 10 Sept 2026
CVE-2026-88274 CVE record

CVSS 7.2 High

GV-LPC2011/LPC2211 - Wireless SSID Command Injection
- GeoVision Inc. GV-LPC2011/LPC2211
- Command injection
Not analysed yet 10 Sept 2026
CVE-2026-88273 CVE record

CVSS 7.2 High

GV-LPC2011/LPC2211 - PPPoE Username Shell-Configuration Command Injection
- GeoVision Inc. GV-LPC2011/LPC2211
- Command injection
Not analysed yet 10 Sept 2026
CVE-2026-88272 CVE record

CVSS 7.2 High

GV-LPC2011/LPC2211 - Stored Administrator-Username Command Injection
- GeoVision Inc. GV-LPC2011/LPC2211
- Command injection
Not analysed yet 10 Sept 2026
CVE-2026-88271 CVE record

CVSS 8.8 High

GV-LPC2011/LPC2211 - SSVR Guest Configuration Overwrite and Administrative Credential Takeover
- GeoVision Inc. GV-LPC2011/LPC2211
- Broken access control
Not analysed yet 10 Sept 2026
CVE-2026-88270 CVE record

CVSS 6.5 Medium

GV-LPC2011/LPC2211 - SSVR Guest Firmware-Mode Pre-Validation Service Teardown Denial of Service
- GeoVision Inc. GV-LPC2011/LPC2211
- Broken access control
Not analysed yet 10 Sept 2026
CVE-2026-88269 CVE record

CVSS 6.5 Medium

GV-LPC2011/LPC2211 - SSVR Guest Configuration and Credential Disclosure
- GeoVision Inc. GV-LPC2011/LPC2211
- Broken access control
Not analysed yet 10 Sept 2026
CVE-2026-42368 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

GeoVision LPC2011/LPC2211 Web Interface privilege escalation vulnerability
- GeoVision Inc. GV-LPC2011/LPC2211
- Privilege escalation
Not analysed yet 4 May 2026
CVE-2026-42367 CVE record

CVSS 6.5 Medium

GeoVision LPC2011/LPC2211 Web Interface / ssi.cgi privilege escalation vulnerability via leak of Administrator credentials
- GeoVision Inc. GV-LPC2011/LPC2211
- Hard-coded credentials
Not analysed yet 4 May 2026
CVE-2026-7371 CVE record

CVSS 7.4 High

GeoVision LPC2011/LPC2211 Web Interface / ssi.cgi reflected cross-site scripting (XSS) vulnerabilities
- GeoVision Inc. GV-LPC2011/LPC2211
- Cross-site scripting (XSS)
Not analysed yet 4 May 2026
CVE-2026-42366 CVE record

CVSS 7.4 High

GeoVision LPC2011/LPC2211 Web Interface / ssi.cgi reflected cross-site scripting (XSS) vulnerabilities
- GeoVision Inc. GV-LPC2011/LPC2211
- Cross-site scripting (XSS)
Not analysed yet 4 May 2026
CVE-2026-42365 CVE record

CVSS 8.6 High

GeoVision LPC2011/LPC2211 Web Interface guessable session cookie vulnerability
- GeoVision Inc. GV-LPC2011/LPC2211
- CWE-341
Not analysed yet 4 May 2026
CVE-2026-42364 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

GeoVision LPC2011/LPC2211 Web Interface / DdnsSetting.cgi OS command injection vulnerability
- GeoVision Inc. GV-LPC2011/LPC2211
- Command injection
Not analysed yet 4 May 2026