by Kastro
Paper/Archive/CVE-2026-42368

CVE-2026-42368

GeoVision Inc. GV-LPC2011/LPC2211 — GeoVision LPC2011/LPC2211 Web Interface privilege escalation vulnerability

EPSS 0.4%CVSS 9.9
critical.is priorityof 100
36
CVSS 9.9 (CNA)9.9 / 10 × 3029.7Not in CISA KEV+300.0EPSS percentile 30.2.302 × 206.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A privilege escalation vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted HTTP request can lead to execute priviledged operation. An attacker can visit a webpage to trigger this vulnerability.

Affected

ProductAffectedFixed inSource
GV-LPC2011/LPC22111.101.2CNA

Scores by source

GV (CNA)9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

advisorygeovision.com.tw/cyber_security.phpwriteuphttps://talosintelligence.com/vulnerability_reportsreftalosintelligence.com/vulnerability_reports/TALOS-2026-2329