EUVD-2026-75311

GeoVision GV-LPC2211 V1.13 allows an authenticated ONVIF user to inject shell commands through ConsumerReference.Address and execute arbitrary commands as root...

CVE-2026-88277

GeoVision GV-LPC2211 version 1.13 is affected by a command injection vulnerability in its ONVIF interface. An authenticated ONVIF user can inject shell commands via the ConsumerReference.Address field, leading to arbitrary command execution with root privileges . The vulnerability is network-reac...

CVE-2026-88276 GV-LPCLPC2011/2211 - Wireless WEP Key1-Key4 Command Injection

GeoVision GV-LPC2211 V1.13 allows administrator-controlled WEP key values containing shell syntax to execute arbitrary commands as root...

EUVD-2026-75310

GeoVision GV-LPC2211 V1.13 allows administrator-controlled WEP key values containing shell syntax to execute arbitrary commands as root...

CVE-2026-88276

GeoVision GV-LPC2211 (firmware V1.13) is vulnerable to command injection via its wireless WEP Key1–Key4 fields. When an administrator sets WEP key values containing shell syntax, the device executes them as root , enabling arbitrary command execution . The CVSS 3.1 score is 7.2 (High) (AV:N/AC:L/...

CVE-2026-88276 GV-LPCLPC2011/2211 - Wireless WEP Key1-Key4 Command Injection

GeoVision GV-LPC2211 V1.13 allows administrator-controlled WEP key values containing shell syntax to execute arbitrary commands as root...

CVE-2026-88275 GV-LPC2011/LPC2211 - Wireless WPA-PSK Command Injection

GeoVision GV-LPC2211 V1.13 allows an administrator-controlled WPA-PSK containing shell syntax to execute arbitrary commands as root when wireless configuration is applied...

CVE-2026-88275 GV-LPC2011/LPC2211 - Wireless WPA-PSK Command Injection

GeoVision GV-LPC2211 V1.13 allows an administrator-controlled WPA-PSK containing shell syntax to execute arbitrary commands as root when wireless configuration is applied...

EUVD-2026-75309

GeoVision GV-LPC2211 V1.13 allows an administrator-controlled WPA-PSK containing shell syntax to execute arbitrary commands as root when wireless configuration is applied...

CVE-2026-88275

GeoVision GV-LPC2211 (also affecting GV-LPC2011) version V1.13 contains a command injection vulnerability in its wireless configuration. An administrator can craft a WPA-PSK password containing shell syntax that, when the wireless configuration is applied, executes arbitrary commands as root . Th...

CVE-2026-88274

GeoVision GV-LPC2211 (V1.13), a wireless camera, is affected by a command injection vulnerability in its wireless SSID configuration. An administrator who sets a wireless SSID containing shell syntax can execute arbitrary commands as root on the device. The vulnerability requires high privileges ...

EUVD-2026-75308

GeoVision GV-LPC2211 V1.13 allows an administrator-controlled wireless SSID containing shell syntax to execute arbitrary commands as root...

CVE-2026-88274 GV-LPC2011/LPC2211 - Wireless SSID Command Injection

GeoVision GV-LPC2211 V1.13 allows an administrator-controlled wireless SSID containing shell syntax to execute arbitrary commands as root...

CVE-2026-88273 GV-LPC2011/LPC2211 - PPPoE Username Shell-Configuration Command Injection

GeoVision GV-LPC2211 V1.13 allows an administrator-controlled PPPoE username to escape a sourced shell configuration assignment and execute arbitrary commands as root...

CVE-2026-88273

GeoVision GV-LPC2211 (version V1.13 ) is affected by a command injection vulnerability in its PPPoE username configuration. An administrator-controlled PPPoE username value can escape a sourced shell configuration assignment , allowing the execution of arbitrary commands as root . The attack requ...

EUVD-2026-75307

GeoVision GV-LPC2211 V1.13 allows an administrator-controlled PPPoE username to escape a sourced shell configuration assignment and execute arbitrary commands as root...

EUVD-2026-75305

GeoVision GV-LPC2211 V1.13 allows an administrator-controlled username containing shell metacharacters to be executed as arbitrary root commands when the stored username is later deleted...

CVE-2026-88272 GV-LPC2011/LPC2211 - Stored Administrator-Username Command Injection

GeoVision GV-LPC2211 V1.13 allows an administrator-controlled username containing shell metacharacters to be executed as arbitrary root commands when the stored username is later deleted...

CVE-2026-88272

GeoVision GV-LPC2211 V1.13 is affected by a stored command injection vulnerability in the administrator username field. When an administrator creates a username containing shell metacharacters , those characters are later interpreted as arbitrary root-level commands at the time the stored usernam...

CVE-2026-88272 GV-LPC2011/LPC2211 - Stored Administrator-Username Command Injection

GeoVision GV-LPC2211 V1.13 allows an administrator-controlled username containing shell metacharacters to be executed as arbitrary root commands when the stored username is later deleted...