CVE-2026-88285criticalCWE-306

CVE-2026-88285: falha crítica em GeoVision Inc. GV-LPC2011/LPC2211

GV-LPC2011/LPC2211 - Unauthenticated PTZ Control Service

Publicada em

Seguir esta CVE+ Monitorar GV-LPC2011/LPC2211

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.4epss 0.5%
GeoVision GV-LPC2211 V1.13 exposes a network-accessible PTZ control service without authentication, allowing remote clients to retrieve PTZ information and issue PTZ or raw serial commands.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
Produtos afetados
GeoVision Inc. · GV-LPC2011/LPC2211
CVEs relacionadas — GeoVision Inc. GV-LPC2011/LPC2211

No mesmo produto, das mais perigosas para as menos.

CVE-2026-42364CRITICALGeoVision LPC2011/LPC2211 Web Interface / DdnsSetting.cgi OS command injection vulnerabilityEPSS 1.7%CVE-2026-88275HIGHGV-LPC2011/LPC2211 - Wireless WPA-PSK Command InjectionEPSS 0.7%CVE-2026-88274HIGHGV-LPC2011/LPC2211 - Wireless SSID Command InjectionEPSS 0.7%CVE-2026-88273HIGHGV-LPC2011/LPC2211 - PPPoE Username Shell-Configuration Command InjectionEPSS 0.7%CVE-2026-88289HIGHGV-LPC2011/LPC2211 - Multiple Pre-Authentication Stack Buffer Overflows in VLSVR Request HandlersEPSS 0.6%CVE-2026-88288MEDIUMGV-LPC2011/LPC2211 - Arbitrary File Read Through BKDownloadLink.cgi Symlink CreationEPSS 0.5%