CVE-2026-88281
GeoVision GV-LPC2211 V1.13 fails to limit repeated Username elements in ONVIF DeleteUsers requests, allowing an authenticated administrator to overflow a stack array and crash the ONVIF worker.
- Published Sep 10, 2026
- CVSS 4.9 medium
- 0.4% chance of exploitation in the next 30 days (EPSS)