Geovisioninc

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in any Geovisioninc product.

RSS Feeds for Geovisioninc security vulnerabilities

Create a CVE RSS feed including security vulnerabilities found in Geovisioninc products with stack.watch. Just hit watch, then grab your custom RSS feed url.

Products by Geovisioninc Sorted by Most Security Vulnerabilities since 2018

Geovisioninc Gv Lpc2011 Lpc221124 vulnerabilities

Geovisioninc Geowebplayer18 vulnerabilities

Geovisioninc Gv Lpclpc2011 221115 vulnerabilities

Geovisioninc Gv I O Box 4e8 vulnerabilities

Geovisioninc Gv Ip Device Utility3 vulnerabilities

Geovisioninc Gv Vms V20 0 23 vulnerabilities

Geovisioninc Asmanager1 vulnerability

Geovisioninc Geovision1 vulnerability

Geovisioninc Gv Remote E Map1 vulnerability

By the Year

In 2026 there have been 74 vulnerabilities in Geovisioninc with an average score of 8.1 out of ten.

Year	Vulnerabilities	Average Score
2026	74	8.09

It may take a day or so for new Geovisioninc vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Geovisioninc Security Vulnerabilities

CVE	Date	Vulnerability	Products
CVE-2026-92838	Sep 17, 2026	DLL Hijacking in GeoVision GV-Remote E-Map Desktop App A DLL hijacking vulnerability exists in the GeoVision GV-Remote E-Map desktop application. The application loads one or more dynamic-link libraries (DLLs) from an unsafe search path, allowing a local attacker to place a malicious DLL in a location searched before the legitimate library location. If successfully exploited, an attacker with local write access to the affected directory could achieve arbitrary code execution in the security context of the GV-Remote E-Map process.	Gv Remote E Map
CVE-2026-88290	Sep 10, 2026	GeoVision GV-LPC2211 V1.14: Unauth VLSVR Lengths Causing Resource Exhaustion GeoVision GV-LPC2211 V1.14 (260903) allows unauthenticated clients to declare unbounded VLSVR frame lengths and indefinitely delay blocking receives, allowing remote exhaustion of memory, connection, and worker resources.	Gv Lpc2011 Lpc2211
CVE-2026-88289	Sep 10, 2026	VLSVR Stack Buffer Overrun in GeoVision GV-LPC2211 V1.14 GeoVision GV-LPC2211 V1.14 (260903) fails to validate attacker-controlled variable-length fields before copying them into fixed-size stack buffers in multiple VLSVR request handlers, allowing an unauthenticated remote attacker to crash the VLSVR service.	Gv Lpc2011 Lpc2211
CVE-2026-88288	Sep 10, 2026	GeoVision GV-LPC2211 V1.13 Unrestricted File Read via BKDownloadLink.cgi GeoVision GV-LPC2211 V1.13 fails to restrict the filename supplied to BKDownloadLink.cgi, allowing a remote user with valid web credentials to read arbitrary files accessible to the root-run web service.	Gv Lpc2011 Lpc2211
CVE-2026-88287	Sep 10, 2026	GeoVision GV-LPC2211 V1.13 ONVIF WS-Discovery Scope Token Count Overflow GeoVision GV-LPC2211 V1.13 fails to bound the number of Scopes tokens in unauthenticated ONVIF WS-Discovery Probe requests, allowing a remote attacker to corrupt stack control state and crash the discovery process.	Gv Lpc2011 Lpc2211
CVE-2026-88286	Sep 10, 2026	GV-LPC2211 V1.13 PTZ State Flaw Blocks Accept Loop GeoVision GV-LPC2211 V1.13 improperly manages PTZ connection state, allowing an unauthenticated remote client to block the accept loop and prevent new PTZ connections.	Gv Lpc2011 Lpc2211
CVE-2026-88285	Sep 10, 2026	GeoVision GV-LPC2211 V1.13 PTZ Control Service Exposes Remote Access Without Auth GeoVision GV-LPC2211 V1.13 exposes a network-accessible PTZ control service without authentication, allowing remote clients to retrieve PTZ information and issue PTZ or raw serial commands.	Gv Lpc2011 Lpc2211
CVE-2026-88284	Sep 10, 2026	GV-LPC2211 V1.13 Stack Overwrite via Repeated User in ONVIF SetUser GeoVision GV-LPC2211 V1.13 fails to limit repeated User elements in ONVIF SetUser requests, allowing an authenticated administrator to overwrite stack control state and crash the ONVIF worker.	Gv Lpc2011 Lpc2211
CVE-2026-88283	Sep 10, 2026	GV-LPC2211 V1.13 ONVIF CreateUsers Stack Corruption GeoVision GV-LPC2211 V1.13 fails to limit repeated User elements in ONVIF CreateUsers requests, allowing an authenticated administrator to overwrite stack control state and crash the ONVIF worker.	Gv Lpc2011 Lpc2211
CVE-2026-88282	Sep 10, 2026	GeoVision GV-LPC2211 V1.13 FTP Username Shell Metachar Exec Root GeoVision GV-LPC2211 V1.13 allows an administrator-controlled FTP username containing shell metacharacters to be executed as arbitrary root commands during a subsequent FTP-account update.	Gv Lpclpc2011 2211
CVE-2026-88281	Sep 10, 2026	GeoVision GV-LPC2211 v1.13 ONVIF DeleteUsers Array Overflow (CVE-2026-88281) GeoVision GV-LPC2211 V1.13 fails to limit repeated Username elements in ONVIF DeleteUsers requests, allowing an authenticated administrator to overflow a stack array and crash the ONVIF worker.	Gv Lpc2011 Lpc2211
CVE-2026-88280	Sep 10, 2026	GeoVision GVLPC2211 V1.13: ONVIF SetUser password overflow crashes worker GeoVision GV-LPC2211 V1.13 copies an oversized ONVIF SetUser password into a fixed stack field, allowing an authenticated administrator to crash the ONVIF worker.	Gv Lpc2011 Lpc2211
CVE-2026-88279	Sep 10, 2026	GeoVision GVLPC2211 V1.13 ONVIF CreateUsers Stack Buffer Copy Crash GeoVision GV-LPC2211 V1.13 copies oversized ONVIF CreateUsers username or password values into fixed stack fields, allowing an authenticated administrator to crash the ONVIF worker.	Gv Lpc2011 Lpc2211
CVE-2026-88278	Sep 10, 2026	GeoVision GV-LPC2211 V1.13 WS-Security UsernameToken Replay GeoVision GV-LPC2211 V1.13 fails to enforce WS-Security UsernameToken freshness or nonce reuse protection, allowing a captured PasswordDigest token to be replayed for subsequent ONVIF operations.	Gv Lpclpc2011 2211
CVE-2026-88277	Sep 10, 2026	GV-LPC2211 V1.13 Root Exploit via ONVIF ConsumerReference.Address GeoVision GV-LPC2211 V1.13 allows an authenticated ONVIF user to inject shell commands through ConsumerReference.Address and execute arbitrary commands as root.	Gv Lpclpc2011 2211
CVE-2026-88276	Sep 10, 2026	GeoVision GV-LPC2211 V1.13 Admin WEP key shell exec root GeoVision GV-LPC2211 V1.13 allows administrator-controlled WEP key values containing shell syntax to execute arbitrary commands as root.	Gv Lpclpc2011 2211
CVE-2026-88275	Sep 10, 2026	Command Injection via Admin WPA-PSK: GeoVision GV-LPC2211 V1.13 GeoVision GV-LPC2211 V1.13 allows an administrator-controlled WPA-PSK containing shell syntax to execute arbitrary commands as root when wireless configuration is applied.	Gv Lpc2011 Lpc2211
CVE-2026-88274	Sep 10, 2026	GeoVision GV-LPC2211 V1.13 SSID Command Injection Root GeoVision GV-LPC2211 V1.13 allows an administrator-controlled wireless SSID containing shell syntax to execute arbitrary commands as root.	Gv Lpc2011 Lpc2211
CVE-2026-88273	Sep 10, 2026	GeoVision GV-LPC2211 V1.13 PPPoE Username Shell Config Esc to Root GeoVision GV-LPC2211 V1.13 allows an administrator-controlled PPPoE username to escape a sourced shell configuration assignment and execute arbitrary commands as root.	Gv Lpc2011 Lpc2211
CVE-2026-88272	Sep 10, 2026	GeoVision GV-LPC2211 V1.13 Arbitrary Root Command via Username Metachar Exec GeoVision GV-LPC2211 V1.13 allows an administrator-controlled username containing shell metacharacters to be executed as arbitrary root commands when the stored username is later deleted.	Gv Lpc2011 Lpc2211
CVE-2026-88271	Sep 10, 2026	GeoVision GV-LPC2211 V1.13 Guest exploit overwrites config via SSVR GeoVision GV-LPC2211 V1.13 allows a Guest user to overwrite device configuration and replace the administrator password through SSVR.	Gv Lpc2011 Lpc2211
CVE-2026-88270	Sep 10, 2026	GV-LPC2211 V1.13 SSVR Firmware-Upgrade Mode DoS GeoVision GV-LPC2211 V1.13 allows a Guest user to enter SSVR firmware-upgrade mode and disrupt live services before any firmware image is validated.	Gv Lpc2011 Lpc2211
CVE-2026-88269	Sep 10, 2026	GeoVision GVLPC2211 V1.13 SSVR Guest read config disclosure GeoVision GV-LPC2211 V1.13 allows a Guest user to retrieve persistent device configuration containing plaintext administrative and user credentials through SSVR.	Gv Lpc2011 Lpc2211
CVE-2026-88268	Sep 10, 2026	GeoVision GV-LPC2211 V1.13 Authenticated SSVR Stack Buffer Overflow GeoVision GV-LPC2211 V1.13 contains an authenticated stack buffer overflow in SSVR fragment reassembly that allows a valid user to crash the SSVR service.	Gv Lpclpc2011 2211
CVE-2026-16519	Jul 24, 2026	DLL Hijacking in GeoVision GV-IP Device Utility via unsafe DLL path A DLL hijacking vulnerability exists in the GeoVision GV-IP Device Utility desktop application. The application loads one or more dynamic-link libraries (DLLs) from an unsafe search path, allowing a local attacker to place a malicious DLL in a location searched before the legitimate library location.	Gv Ip Device Utility
CVE-2026-57278	Jul 02, 2026	GeoVision GeoWebPlayer WebSocket Buffer Overflow via connectionInfo cmd GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Cloud, ...). It creates a websocket server that expands the capabilities of the various web-interfaces provided by the GeoVision software and may be necessary for them to function properly. The Websocket server can accept various commands coming from localhost. One of them, `connectionInfo` is meant to provide the necessary details to connect to a camera. The handler associated with this command that we call`handle_connection_info` contains multiple instances of string copy that can overflow. The function `handle_connect_info` copies attacker-controlled JSON strings into fixed-size buffers using manual byte-by-byte loops that do not enforce length limits. #### Buffer Overflow in ip field	Geowebplayer
CVE-2026-57277	Jul 02, 2026	GeoWebPlayer CVE-2026-57277: connectionInfo Buffer Overflow via localhost GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Cloud, ...). It creates a websocket server that expands the capabilities of the various web-interfaces provided by the GeoVision software and may be necessary for them to function properly. The Websocket server can accept various commands coming from localhost. One of them, `connectionInfo` is meant to provide the necessary details to connect to a camera. The handler associated with this command that we call`handle_connection_info` contains multiple instances of string copy that can overflow. The function `handle_connect_info` copies attacker-controlled JSON strings into fixed-size buffers using manual byte-by-byte loops that do not enforce length limits. #### Buffer Overflow in key field	Geowebplayer
CVE-2026-57276	Jul 02, 2026	Buffer Overflow in GeoWebPlayer Password Field (GeoVision Web Plugin) GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Cloud, ...). It creates a websocket server that expands the capabilities of the various web-interfaces provided by the GeoVision software and may be necessary for them to function properly. The Websocket server can accept various commands coming from localhost. One of them, `connectionInfo` is meant to provide the necessary details to connect to a camera. The handler associated with this command that we call`handle_connection_info` contains multiple instances of string copy that can overflow. The function `handle_connect_info` copies attacker-controlled JSON strings into fixed-size buffers using manual byte-by-byte loops that do not enforce length limits. #### Buffer Overflow in password field (key present)	Geowebplayer
CVE-2026-57275	Jul 02, 2026	GeoWebPlayer WebSocket Username Field Buffer Overflow (CVE-2026-57275) GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Cloud, ...). It creates a websocket server that expands the capabilities of the various web-interfaces provided by the GeoVision software and may be necessary for them to function properly. The Websocket server can accept various commands coming from localhost. One of them, `connectionInfo` is meant to provide the necessary details to connect to a camera. The handler associated with this command that we call`handle_connection_info` contains multiple instances of string copy that can overflow. The function `handle_connect_info` copies attacker-controlled JSON strings into fixed-size buffers using manual byte-by-byte loops that do not enforce length limits. #### Buffer Overflow in username field (key present)	Geowebplayer
CVE-2026-57274	Jul 02, 2026	CVE-2026-57274: GeoWebPlayer Buffer Overflow via websocket connectionInfo GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Cloud, ...). It creates a websocket server that expands the capabilities of the various web-interfaces provided by the GeoVision software and may be necessary for them to function properly. The Websocket server can accept various commands coming from localhost. One of them, `connectionInfo` is meant to provide the necessary details to connect to a camera. The handler associated with this command that we call`handle_connection_info` contains multiple instances of string copy that can overflow. The function `handle_connect_info` copies attacker-controlled JSON strings into fixed-size buffers using manual byte-by-byte loops that do not enforce length limits. #### Buffer Overflow in password field (no key present)	Geowebplayer
CVE-2026-57273	Jul 02, 2026	GeoWebPlayer WebSocket Server Buffer Overflow GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Cloud, ...). It creates a websocket server that expands the capabilities of the various web-interfaces provided by the GeoVision software and may be necessary for them to function properly. The Websocket server can accept various commands coming from localhost. One of them, `connectionInfo` is meant to provide the necessary details to connect to a camera. The handler associated with this command that we call`handle_connection_info` contains multiple instances of string copy that can overflow. The function `handle_connect_info` copies attacker-controlled JSON strings into fixed-size buffers using manual byte-by-byte loops that do not enforce length limits. #### Buffer Overflow in username field (no key present)	Geowebplayer
CVE-2026-57272	Jul 02, 2026	GeoWebPlayer OOB Index Bypass via WebSocket Commands GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Cloud, ...). It creates a websocket server that expands the capabilities of the various web-interfaces provided by the GeoVision software and may be necessary for them to function properly. The Websocket server can accept various commands coming from localhost. Many of the commands will take an `index` value that is then used to access various arrays to enter critical sections, perform various actions via function calls, etc. However the `index` value is usually not checked for valid range, and as such it can be used to access multiple arrays out-of-bound. #### byPass command index-out-of-bound	Geowebplayer
CVE-2026-57271	Jul 02, 2026	GeoVision GeoWebPlayer OOB assigner via WS server GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Cloud, ...). It creates a websocket server that expands the capabilities of the various web-interfaces provided by the GeoVision software and may be necessary for them to function properly. #### pause command index-out-of-bound	Geowebplayer
CVE-2026-57270	Jul 02, 2026	GeoWebPlayer WebSocket OOB Index Command Injection GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Cloud, ...). It creates a websocket server that expands the capabilities of the various web-interfaces provided by the GeoVision software and may be necessary for them to function properly. The Websocket server can accept various commands coming from localhost. Many of the commands will take an `index` value that is then used to access various arrays to enter critical sections, perform various actions via function calls, etc. However the `index` value is usually not checked for valid range, and as such it can be used to access multiple arrays out-of-bound. #### play command index-out-of-bound	Geowebplayer
CVE-2026-57269	Jul 02, 2026	GeoWebPlayer OOB Array Access via Unchecked Index on WebSocket GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Cloud, ...). It creates a websocket server that expands the capabilities of the various web-interfaces provided by the GeoVision software and may be necessary for them to function properly. The Websocket server can accept various commands coming from localhost. Many of the commands will take an `index` value that is then used to access various arrays to enter critical sections, perform various actions via function calls, etc. However the `index` value is usually not checked for valid range, and as such it can be used to access multiple arrays out-of-bound. #### disconnect command index-out-of-bound	Geowebplayer
CVE-2026-57268	Jul 02, 2026	CVE-2026-57268: GeoVision GeoWebPlayer Websocket OOB Index Exploit GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Cloud, ...). It creates a websocket server that expands the capabilities of the various web-interfaces provided by the GeoVision software and may be necessary for them to function properly. The Websocket server can accept various commands coming from localhost. Many of the commands will take an `index` value that is then used to access various arrays to enter critical sections, perform various actions via function calls, etc. However the `index` value is usually not checked for valid range, and as such it can be used to access multiple arrays out-of-bound. ### saveVideo command index-out-of-bound When sending the `saveVideo` command, the `index` field is extracted from the websocket message [1]. Then without checking the range of the index, it is used to trigger a CriticalSection ([2]) and releases it [3]. The release function call ([3]) is executed using a function pointer which will be read out of bounds potentially leading to code execution: v6 = get_entry(a2, "index"); result = json_is_value_int(v6); if ( (_BYTE)result ) { v8 = get_entry(a2, "index"); index = json_value_to_int(&v8->value); // [1] result = CCriticalSection::EnterCritSection(&this->crit_sections[index]); //[2] if ( result ) { if ( this->array_of_IPCams[index] ) { if ( this->array_of_IPCams[index]->field_20 ) do_PostMessageA((CViewer )this->array_of_IPCams[index], 0x111u, 0x139Fu, v11); } return ((int (__thiscall *)(CCriticalSection ))(this->crit_sections[index].vtbl + 20))(&this->crit_sections[index]); //[3] } }	Geowebplayer
CVE-2026-57267	Jul 02, 2026	GeoWebPlayer WS Server OOB Index Access GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Cloud, ...). It creates a websocket server that expands the capabilities of the various web-interfaces provided by the GeoVision software and may be necessary for them to function properly. The Websocket server can accept various commands coming from localhost. Many of the commands will take an `index` value that is then used to access various arrays to enter critical sections, perform various actions via function calls, etc. However the `index` value is usually not checked for valid range, and as such it can be used to access multiple arrays out-of-bound. #### snapshot command index-out-of-bound	Geowebplayer
CVE-2026-57266	Jul 02, 2026	GeoVision GeoWebPlayer OOB via unvalidated index in WebSocket server GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Cloud, ...). It creates a websocket server that expands the capabilities of the various web-interfaces provided by the GeoVision software and may be necessary for them to function properly. The Websocket server can accept various commands coming from localhost. Many of the commands will take an `index` value that is then used to access various arrays to enter critical sections, perform various actions via function calls, etc. However the `index` value is usually not checked for valid range, and as such it can be used to access multiple arrays out-of-bound. #### 2wayAudio command index-out-of-bound	Geowebplayer
CVE-2026-57265	Jul 02, 2026	GeoWebPlayer OOB Access via Unchecked Index in WebSocket API GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Cloud, ...). It creates a websocket server that expands the capabilities of the various web-interfaces provided by the GeoVision software and may be necessary for them to function properly. The Websocket server can accept various commands coming from localhost. Many of the commands will take an `index` value that is then used to access various arrays to enter critical sections, perform various actions via function calls, etc. However the `index` value is usually not checked for valid range, and as such it can be used to access multiple arrays out-of-bound. #### audio command index-out-of-bound	Geowebplayer
CVE-2026-57264	Jul 02, 2026	GeoWebPlayer Index OOB in WebSocket Server (GV-VMS) GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Cloud, ...). It creates a websocket server that expands the capabilities of the various web-interfaces provided by the GeoVision software and may be necessary for them to function properly. The Websocket server can accept various commands coming from localhost. Many of the commands will take an `index` value that is then used to access various arrays to enter critical sections, perform various actions via function calls, etc. However the `index` value is usually not checked for valid range, and as such it can be used to access multiple arrays out-of-bound. #### setPIP command index-out-of-bound	Geowebplayer
CVE-2026-13132	Jul 02, 2026	GeoVision GeoWebPlayer Websocket OOB Vulnerability GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Cloud, ...). It creates a websocket server that expands the capabilities of the various web-interfaces provided by the GeoVision software and may be necessary for them to function properly. The Websocket server can accept various commands coming from localhost. Many of the commands will take an `index` value that is then used to access various arrays to enter critical sections, perform various actions via function calls, etc. However the `index` value is usually not checked for valid range, and as such it can be used to access multiple arrays out-of-bound. #### setStream command index-out-of-bound	Geowebplayer
CVE-2026-13131	Jul 02, 2026	GeoWebPlayer WS Index Out-Of-Bound in WebSocket Server (CVE-2026-13131) GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Cloud, ...). It creates a websocket server that expands the capabilities of the various web-interfaces provided by the GeoVision software and may be necessary for them to function properly. The Websocket server can accept various commands coming from localhost. Many of the commands will take an `index` value that is then used to access various arrays to enter critical sections, perform various actions via function calls, etc. However the `index` value is usually not checked for valid range, and as such it can be used to access multiple arrays out-of-bound. #### connectInfo command index-out-of-bound	Geowebplayer
CVE-2026-13125	Jul 02, 2026	Unauthorized WebSocket Access in GeoWebPlayer Allows Screen Capture GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Cloud, ...). It creates a websocket server that expands the capabilities of the various web-interfaces provided by the GeoVision software and may be necessary for them to function properly. In order to access the websocket server, no authentication is required. As such, any malicious website can attempt to open a connection to the server and potentially access sensitive APIs. In particular, it's possible to call a combination of the `create` method and `getScreenCapture` to retrieve the content of the user's screen.	Geowebplayer
CVE-2026-57881	Jun 26, 2026	Stack buffer overflow in vlsvr GV-LPC2011/2211 V1.12 and earlier An unauthenticated stack-based buffer overflow vulnerability exists in vlsvr in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient length validation when processing remote login data. A remote attacker may exploit this vulnerability by sending crafted login data with overly long input, resulting in memory corruption, denial of service, or potentially arbitrary code execution.	Gv Lpclpc2011 2211
CVE-2026-57880	Jun 26, 2026	Stack-based Buffer Overflow in ssvr (GeoVision GV-LPC2011/2211) v1.12- via RTSP Auth An unauthenticated stack-based buffer overflow vulnerability exists in ssvr in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient bounds checking when parsing RTSP Digest authentication fields. A remote attacker may exploit this vulnerability by sending a crafted RTSP request containing overly long authentication data, resulting in memory corruption, denial of service, or potentially arbitrary code execution.	Gv Lpclpc2011 2211
CVE-2026-57879	Jun 26, 2026	GeoVision GV-LPC2011 ssvr stack overflow before V1.12 An unauthenticated stack-based buffer overflow vulnerability exists in ssvr in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient bounds checking when processing RTSP custom authentication data. A remote attacker may exploit this vulnerability by sending a crafted RTSP request, resulting in memory corruption, denial of service, or potentially arbitrary code execution.	Gv Lpclpc2011 2211
CVE-2026-57878	Jun 26, 2026	GeoVision GV-LPC thttpd stack overflow before 1.12 An unauthenticated stack-based buffer overflow vulnerability exists in thttpd in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient bounds checking when processing web request parameters in a specific request path. A remote attacker may exploit this vulnerability by sending a crafted HTTP request with overly long input, resulting in memory corruption, denial of service, or potentially arbitrary code execution.	Gv Lpclpc2011 2211
CVE-2026-57877	Jun 26, 2026	GeoVision GVLPC2011/2211 vlsvr format string (V1.12 and earlier) An unauthenticated format string vulnerability exists in vlsvr in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by improper handling of externally controlled input during log message formatting in the login processing path. A remote attacker may exploit this vulnerability by sending crafted login data, potentially causing information disclosure, memory corruption, or a denial of service.	Gv Lpclpc2011 2211
CVE-2026-57876	Jun 26, 2026	GVLPC2011/2211 v1.12earlier: OOB Write via onvif.cgi An unauthenticated out-of-bounds write vulnerability exists in onvif.cgi in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient bounds checking when processing HTTP request body data. A remote attacker may exploit this vulnerability by sending a crafted request with excessive input, causing memory corruption and resulting in a denial of service.	Gv Lpclpc2011 2211
CVE-2026-57875	Jun 26, 2026	Geovision GV-LPC NPE in HTTP Parsing (1.12) An unauthenticated NULL pointer dereference vulnerability exists in the HTTP request parsing logic of multiple CGI components in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by improper validation of required HTTP request metadata before it is used by the affected components. A remote attacker may exploit this vulnerability by sending a specially crafted HTTP request, causing the affected process to crash and resulting in a denial of service.	Gv Lpclpc2011 2211