CVE Feed

    Dashboard / CVE / CVE-2026-88273

    CVE-2026-88273

    GeoVision GV-LPC2211 V1.13 allows an administrator-controlled PPPoE username to escape a sourced shell configuration assignment and execute arbitrary commands as root.

    Published:Sep 10, 2026
    Last Modified:Sep 10, 2026
    EPS:Sep 10, 2026
    EPSS Score:
    CVSS Score:7.2

    Affected Products

    Vendor
    Geovision Inc.
    Product
    Gv-lpc2011 Lpc2211

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-88290 (CVSS 7.5) — GeoVision GV-LPC2211 V1.14 (260903) allows unauthenticated clients to declare unbounded VLSVR frame lengths an…
    CVE-2026-88289 (CVSS 7.5) — GeoVision GV-LPC2211 V1.14 (260903) fails to validate attacker-controlled variable-length fields before copyin…
    CVE-2026-88288 (CVSS 6.5) — GeoVision GV-LPC2211 V1.13 fails to restrict the filename supplied to BKDownloadLink.cgi, allowing a remote us…
    CVE-2026-88287 (CVSS 7.5) — GeoVision GV-LPC2211 V1.13 fails to bound the number of Scopes tokens in unauthenticated ONVIF WS-Discovery Pr…
    CVE-2026-88286 (CVSS 7.5) — GeoVision GV-LPC2211 V1.13 improperly manages PTZ connection state, allowing an unauthenticated remote client …
    CVE-2026-88285 (CVSS 9.4) — GeoVision GV-LPC2211 V1.13 exposes a network-accessible PTZ control service without authentication, allowing r…
    CVE-2026-88283 (CVSS 4.9) — GeoVision GV-LPC2211 V1.13 fails to limit repeated User elements in ONVIF CreateUsers requests, allowing an au…
    CVE-2026-88281 (CVSS 4.9) — GeoVision GV-LPC2211 V1.13 fails to limit repeated Username elements in ONVIF DeleteUsers requests, allowing a…
    CVE-2026-88280 (CVSS 4.9) — GeoVision GV-LPC2211 V1.13 copies an oversized ONVIF SetUser password into a fixed stack field, allowing an au…
    CVE-2026-88279 (CVSS 4.9) — GeoVision GV-LPC2211 V1.13 copies oversized ONVIF CreateUsers username or password values into fixed stack fie…

    References

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High