CVE-2026-88284 GV-LPC2011/LPC2211 - ONVIF SetUser Repeated-Element Stack-Frame Overflow Denial of Service

GeoVision GV-LPC2211 V1.13 fails to limit repeated User elements in ONVIF SetUser requests, allowing an authenticated administrator to overwrite stack control state and crash the ONVIF worker...

CVE-2026-88283 GV-LPC2011/LPC2211 - ONVIF CreateUsers Repeated-Element Stack-Frame Overflow Denial of Service

GeoVision GV-LPC2211 V1.13 fails to limit repeated User elements in ONVIF CreateUsers requests, allowing an authenticated administrator to overwrite stack control state and crash the ONVIF worker...

EUVD-2026-75317

GeoVision GV-LPC2211 V1.13 fails to limit repeated User elements in ONVIF CreateUsers requests, allowing an authenticated administrator to overwrite stack control state and crash the ONVIF worker...

CVE-2026-88281 GV-LPC2011/LPC2211 - ONVIF DeleteUsers Repeated-Element Stack Overflow Denial of Service

GeoVision GV-LPC2211 V1.13 fails to limit repeated Username elements in ONVIF DeleteUsers requests, allowing an authenticated administrator to overflow a stack array and crash the ONVIF worker...

CVE-2026-88281 GV-LPC2011/LPC2211 - ONVIF DeleteUsers Repeated-Element Stack Overflow Denial of Service

GeoVision GV-LPC2211 V1.13 fails to limit repeated Username elements in ONVIF DeleteUsers requests, allowing an authenticated administrator to overflow a stack array and crash the ONVIF worker...

EUVD-2026-75315

GeoVision GV-LPC2211 V1.13 fails to limit repeated Username elements in ONVIF DeleteUsers requests, allowing an authenticated administrator to overflow a stack array and crash the ONVIF worker...

CVE-2026-88281

GeoVision GV-LPC2211 V1.13 contains a stack overflow vulnerability in its ONVIF DeleteUsers endpoint. The failure to limit repeated Username elements in a DeleteUsers request allows an authenticated administrator to overflow a stack array and crash the ONVIF worker process, resulting in a denial ...

CVE-2026-88280 GV-LPC2011/LPC2211 - ONVIF SetUser Stack-Frame Overflow Denial of Service

GeoVision GV-LPC2211 V1.13 copies an oversized ONVIF SetUser password into a fixed stack field, allowing an authenticated administrator to crash the ONVIF worker...

CVE-2026-88280 GV-LPC2011/LPC2211 - ONVIF SetUser Stack-Frame Overflow Denial of Service

GeoVision GV-LPC2211 V1.13 copies an oversized ONVIF SetUser password into a fixed stack field, allowing an authenticated administrator to crash the ONVIF worker...

CVE-2026-88279

GeoVision GV-LPC2211 V1.13 is affected by a stack-frame overflow in its ONVIF CreateUsers service. Oversized username or password values are copied into fixed stack fields, allowing an authenticated administrator to crash the ONVIF worker, resulting in a denial of service on the device's ONVIF fu...

CVE-2026-88279 GV-LPC2011/LPC2211 - ONVIF CreateUsers Username/Password Stack-Frame Overflow Denial of Service

GeoVision GV-LPC2211 V1.13 copies oversized ONVIF CreateUsers username or password values into fixed stack fields, allowing an authenticated administrator to crash the ONVIF worker...

CVE-2026-88279 GV-LPC2011/LPC2211 - ONVIF CreateUsers Username/Password Stack-Frame Overflow Denial of Service

GeoVision GV-LPC2211 V1.13 copies oversized ONVIF CreateUsers username or password values into fixed stack fields, allowing an authenticated administrator to crash the ONVIF worker...

EUVD-2026-75313

GeoVision GV-LPC2211 V1.13 copies oversized ONVIF CreateUsers username or password values into fixed stack fields, allowing an authenticated administrator to crash the ONVIF worker...

CVE-2026-88268

GeoVision GV-LPC2211 (and GV-LPC2011 ) version V1.13 is affected by an authenticated stack buffer overflow in the SSVR fragment reassembly mechanism. A valid user can exploit this flaw to crash the SSVR service , resulting in a denial of service. The CVSS v3.1 score is 6.5 (MEDIUM) with a network...

CVE-2026-88268 GV-LPC2011/LPC2211 - SSVR Fragment-Reassembly Stack Overflow Denial of Service

GeoVision GV-LPC2211 V1.13 contains an authenticated stack buffer overflow in SSVR fragment reassembly that allows a valid user to crash the SSVR service...

PT-2026-89320

GeoVision GV-LPC2211 V1.13 copies oversized ONVIF CreateUsers username or password values into fixed stack fields, allowing an authenticated administrator to crash the ONVIF worker...

Investigating Developer-Reported Software Security Testing Challenges

Software security testing SST is essential for identifying vulnerabilities and improving software security, but developers often face practical challenges when selecting tools, configuring test environments, interpreting scanner outputs, testing authentication workflows, and acting on reported...

CVE-2026-42808: Buffer Copy without Checking Size of Input

An issue was discovered in Bosch Sensortec COINESSDK versions 2.0 through 2.11. The host streaming API function coinesreadstreamsensordata fails to validate the boundaries of the caller-provided destination buffer. Internally, the stream processing mechanism in commintfprocessstreamresponse...

Oracle Linux 10 : ELSA-2026-66336-0: / vim (ELSA-2026-663360)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-663360 advisory. - RHEL-253668 CVE-2026-28420 buffer overflow in terminal emulator - RHEL-215660 CVE-2026-55892 vim: stack out-of-bounds write in dumpprefixes -...

PT-2026-89322

GeoVision GV-LPC2211 V1.13 fails to limit repeated Username elements in ONVIF DeleteUsers requests, allowing an authenticated administrator to overflow a stack array and crash the ONVIF worker...