CVE-2026-88278: Authentication Bypass by Capture-replay

GeoVision GV-LPC2211 V1.13 fails to enforce WS-Security UsernameToken freshness or nonce reuse protection, allowing a captured PasswordDigest token to be replayed for subsequent ONVIF operations...

PT-2026-89319

🚨 CRITICAL: CVE-2026-88278 CVSS 9.8 GeoVision GV-LPC2211 V1.13 vulnerable to WS-Security token replay attacks. Captured credentials can be reused for unauthorized ONVIF operations. Patch immediately if deployed. CVE Vulnerability PatchNow ThreatIntel https://t.co/WFrJmEw0KA...