CVE-2026-88277 in GV-LPC2211

Summary

by MITRE • 09/10/2026

GeoVision GV-LPC2211 V1.13 allows an authenticated ONVIF user to inject shell commands through ConsumerReference.Address and execute arbitrary commands as root.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsible: GV
• Reservation: 09/10/2026
• Disclosure: 09/10/2026
• Moderation: accepted
• Entry: VDB-401987
• CPE: ready
• CWE: CWE-78 (confirmed)
• CVSS: 8.8 (CNA)
• EPSS: 0.00000
• KEV: no
• Activities: very low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-88277
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-88277
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-88277/