Vulnerabilities

TI-2026-30668 CVE-2026-42368 · GHSA-gh3w-5fjx-5f7x

GeoVision LPC2011/LPC2211 Web Interface privilege escalation vulnerability

MEDIUM 43

A privilege escalation vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00363 Published 2026-05-04 Fixed in 1.2 CWE-266

TI-2026-30667 CVE-2026-42367 · GHSA-678p-gmvf-fgp2

LOW 31

A privilege escalation vulnerability exists in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00283 Published 2026-05-04 Fixed in V1.20 CWE-522

TI-2026-06474 CVE-2026-7371 · GHSA-446j-g93p-whwh

LOW 32

Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10.

CVSS 3.1HIGH 7.4 Network No auth User interaction EPSS 0.00205 Published 2026-05-04 Fixed in V1.20 CWE-79

TI-2026-30666 CVE-2026-42366 · GHSA-q4wh-2frc-937q

LOW 32

Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10.

CVSS 3.1HIGH 7.4 Network No auth User interaction EPSS 0.00205 Published 2026-05-04 Fixed in V1.20 CWE-79

TI-2026-30665 CVE-2026-42365 · GHSA-5v66-384x-cw8p

LOW 37

A guessable session cookie vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00344 Published 2026-05-04 Fixed in 1.12 CWE-341

TI-2026-30664 CVE-2026-42364 · GHSA-pf5g-mwxr-r59q

MEDIUM 46

An os command injection vulnerability exists in the DdnsSetting.cgi functionality of GeoVision LPC2011/LPC2211 1.10.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01678 Published 2026-05-04 Fixed in 1.12 CWE-78