CVE Feed

    Dashboard / CVE / CVE-2026-88281

    CVE-2026-88281

    GeoVision GV-LPC2211 V1.13 fails to limit repeated Username elements in ONVIF DeleteUsers requests, allowing an authenticated administrator to overflow a stack array and crash the ONVIF worker.

    Published:Sep 10, 2026
    Last Modified:Sep 10, 2026
    EPS:Sep 10, 2026
    EPSS Score:
    CVSS Score:4.9

    Affected Products

    Vendor
    Geovision Inc.
    Product
    Gv-lpc2011 Lpc2211

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-121 Stack-based Buffer Overflow

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-88290 (CVSS 7.5) — GeoVision GV-LPC2211 V1.14 (260903) allows unauthenticated clients to declare unbounded VLSVR frame lengths an…
    CVE-2026-88289 (CVSS 7.5) — GeoVision GV-LPC2211 V1.14 (260903) fails to validate attacker-controlled variable-length fields before copyin…
    CVE-2026-88288 (CVSS 6.5) — GeoVision GV-LPC2211 V1.13 fails to restrict the filename supplied to BKDownloadLink.cgi, allowing a remote us…
    CVE-2026-88287 (CVSS 7.5) — GeoVision GV-LPC2211 V1.13 fails to bound the number of Scopes tokens in unauthenticated ONVIF WS-Discovery Pr…
    CVE-2026-88286 (CVSS 7.5) — GeoVision GV-LPC2211 V1.13 improperly manages PTZ connection state, allowing an unauthenticated remote client …
    CVE-2026-88285 (CVSS 9.4) — GeoVision GV-LPC2211 V1.13 exposes a network-accessible PTZ control service without authentication, allowing r…
    CVE-2026-88283 (CVSS 4.9) — GeoVision GV-LPC2211 V1.13 fails to limit repeated User elements in ONVIF CreateUsers requests, allowing an au…
    CVE-2026-88280 (CVSS 4.9) — GeoVision GV-LPC2211 V1.13 copies an oversized ONVIF SetUser password into a fixed stack field, allowing an au…
    CVE-2026-88279 (CVSS 4.9) — GeoVision GV-LPC2211 V1.13 copies oversized ONVIF CreateUsers username or password values into fixed stack fie…
    CVE-2026-88275 (CVSS 7.2) — GeoVision GV-LPC2211 V1.13 allows an administrator-controlled WPA-PSK containing shell syntax to execute arbit…

    References

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High