Critical severity9.9NVD Advisory· Published May 4, 2026· Updated Jun 17, 2026

CVE-2026-42368

Description

A privilege escalation vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted HTTP request can lead to execute priviledged operation. An attacker can visit a webpage to trigger this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Geovision/Gv Lpc2211 Firmware2 versions
cpe:2.3:o:geovision:gv-lpc2011_firmware:1.10:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:geovision:gv-lpc2011_firmware:1.10:*:*:*:*:*:*:*
- cpe:2.3:o:geovision:gv-lpc2211_firmware:1.10:*:*:*:*:*:*:*
Geovision/LPC2011/LPC2211llm-fuzzy
Range: = 1.10

Patches

Vulnerability mechanics

References

www.geovision.com.tw/cyber_security.phpnvdVendor Advisory
https//talosintelligence.com/vulnerability_reports/nvdBroken Link
www.talosintelligence.com/vulnerability_reports/TALOS-2026-2329nvd

News mentions

WolfSSL, GeoVision, VTK vulnerabilities
Cisco Talos Intelligence · Jul 9, 2026

cvss	0.643
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000