CVE-2026-88290
GeoVision GV-LPC2211 V1.14 (260903) allows unauthenticated clients to declare unbounded VLSVR frame lengths and indefinitely delay blocking receives, allowing remote exhaustion of memory, connection, and worker resources.
- Published Sep 10, 2026
- CVSS 7.5 high
- 0.5% chance of exploitation in the next 30 days (EPSS)