CVE-2026-88284

4.9 mediumEPSS 0.4%

Medium (4.9). EPSS 0.4% chance of exploitation in the next 30 days.

GeoVision GV-LPC2211 V1.13 fails to limit repeated User elements in ONVIF SetUser requests, allowing an authenticated administrator to overwrite stack control state and crash the ONVIF worker.

Severity

CVSS 3.1

4.9 medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 38% of CVEs (scores of 2026-10-31)
CWE: CWE-121
Published: 2026-09-10
Modified: 2026-09-10
Record from: the NVD, synced 2026-10-19

References

https://www.geovision.com.tw/cyber_security.php

Check your stack JSON