CVE-2026-57872highCWE-22

CVE-2026-57872: falha de alta gravidade em GeoVision Inc. GV-LPCLPC2011/2211

GV-LPC2011/LPC2211 - unauthorized directory traversal vulnerability (get_fcont.cgi)

Publicada em

Seguir esta CVE+ Monitorar GV-LPCLPC2011/2211

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.5epss 1.5%
An unauthenticated directory traversal vulnerability exists in get_fcont.cgi in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient validation of user-supplied file path input before the requested file is accessed by the CGI component. A remote attacker may exploit this vulnerability by sending a crafted request to read arbitrary files accessible to the affected process, resulting in information disclosure.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
GeoVision Inc. · GV-LPCLPC2011/2211
CVEs relacionadas — GeoVision Inc. GV-LPCLPC2011/2211

No mesmo produto, das mais perigosas para as menos.

CVE-2026-57878CRITICALGV-LPC2011/LPC2211 - unauthorized buffer overflow vulnerability (thttpd)EPSS 1.0%CVE-2026-57880CRITICALGV-LPC2011/LPC2211 - unauthorized buffer overflow via RTSP Digest username (ssvr)EPSS 0.9%CVE-2026-57879CRITICALGV-LPC2011/LPC2211 - unauthorized buffer overflow via AuthMode/AuthValue path (ssvr)EPSS 0.9%CVE-2026-57875HIGHGV-LPC2011/LPC2211 - unauthorized null pointer dereference vulnerability in packet parsingEPSS 0.7%CVE-2026-88276HIGHGV-LPCLPC2011/2211 - Wireless WEP Key1-Key4 Command InjectionEPSS 0.7%CVE-2026-88277HIGHGV-LPCLPC2011/2211 - ONVIF Subscribe Address Command InjectionEPSS 0.7%