CVE-2026-88274: falha de alta gravidade em GeoVision Inc. GV-LPC2011/LPC2211
GV-LPC2011/LPC2211 - Wireless SSID Command Injection
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.2epss 0.7%
GeoVision GV-LPC2211 V1.13 allows an administrator-controlled wireless SSID containing shell syntax to execute arbitrary commands as root.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
GeoVision Inc. · GV-LPC2011/LPC2211CVEs relacionadas — GeoVision Inc. GV-LPC2011/LPC2211
No mesmo produto, das mais perigosas para as menos.
CVE-2026-42364CRITICALGeoVision LPC2011/LPC2211 Web Interface / DdnsSetting.cgi OS command injection vulnerabilityEPSS 1.7%CVE-2026-88275HIGHGV-LPC2011/LPC2211 - Wireless WPA-PSK Command InjectionEPSS 0.7%CVE-2026-88273HIGHGV-LPC2011/LPC2211 - PPPoE Username Shell-Configuration Command InjectionEPSS 0.7%CVE-2026-88289HIGHGV-LPC2011/LPC2211 - Multiple Pre-Authentication Stack Buffer Overflows in VLSVR Request HandlersEPSS 0.6%CVE-2026-88288MEDIUMGV-LPC2011/LPC2211 - Arbitrary File Read Through BKDownloadLink.cgi Symlink CreationEPSS 0.5%CVE-2026-88287HIGHGV-LPC2011/LPC2211 -ONVIF Discovery Probe Scopes Stack-Frame Overflow Denial of ServiceEPSS 0.5%