CVE-2026-88284 in GV-LPC2211

Summary

by MITRE • 09/10/2026

GeoVision GV-LPC2211 V1.13 fails to limit repeated User elements in ONVIF SetUser requests, allowing an authenticated administrator to overwrite stack control state and crash the ONVIF worker.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsible: GV
• Reservation: 09/10/2026
• Disclosure: 09/10/2026
• Moderation: accepted
• Entry: VDB-401980
• CPE: ready
• CWE: CWE-121 (confirmed)
• CVSS: 4.9 (CNA)
• EPSS: 0.00000
• KEV: no
• Activities: very low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-88284
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-88284
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-88284/