CVE Feed

    Dashboard / CVE / CVE-2026-57872

    CVE-2026-57872

    An unauthenticated directory traversal vulnerability exists in get_fcont.cgi in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient validation of user-supplied file path input before the requested file is accessed by the CGI component. A remote attacker may exploit this vulnerability by sending a crafted request to read arbitrary files accessible to the affected process, resulting in information disclosure.

    Published:Jun 26, 2026
    Last Modified:Jun 29, 2026
    EPS:Jun 26, 2026
    EPSS Score:0.00969
    CVSS Score:7.5

    Affected Products

    Vendor
    Geovision Inc.
    Product
    Gv-lpc2011 Lpc2211
    Vendor
    Geovision Inc.
    Product
    Gv-lpclpc2011 2211

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-88290 (CVSS 7.5) — GeoVision GV-LPC2211 V1.14 (260903) allows unauthenticated clients to declare unbounded VLSVR frame lengths an…
    CVE-2026-88289 (CVSS 7.5) — GeoVision GV-LPC2211 V1.14 (260903) fails to validate attacker-controlled variable-length fields before copyin…
    CVE-2026-88288 (CVSS 6.5) — GeoVision GV-LPC2211 V1.13 fails to restrict the filename supplied to BKDownloadLink.cgi, allowing a remote us…
    CVE-2026-88287 (CVSS 7.5) — GeoVision GV-LPC2211 V1.13 fails to bound the number of Scopes tokens in unauthenticated ONVIF WS-Discovery Pr…
    CVE-2026-88286 (CVSS 7.5) — GeoVision GV-LPC2211 V1.13 improperly manages PTZ connection state, allowing an unauthenticated remote client …
    CVE-2026-88285 (CVSS 9.4) — GeoVision GV-LPC2211 V1.13 exposes a network-accessible PTZ control service without authentication, allowing r…
    CVE-2026-88283 (CVSS 4.9) — GeoVision GV-LPC2211 V1.13 fails to limit repeated User elements in ONVIF CreateUsers requests, allowing an au…
    CVE-2026-88281 (CVSS 4.9) — GeoVision GV-LPC2211 V1.13 fails to limit repeated Username elements in ONVIF DeleteUsers requests, allowing a…
    CVE-2026-88280 (CVSS 4.9) — GeoVision GV-LPC2211 V1.13 copies an oversized ONVIF SetUser password into a fixed stack field, allowing an au…
    CVE-2026-88279 (CVSS 4.9) — GeoVision GV-LPC2211 V1.13 copies oversized ONVIF CreateUsers username or password values into fixed stack fie…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High