CVE-2026-88283CWE-121

CVE-2026-88283

Medium · published September 10, 2026

CVSS v3.1
4.9
EPSS
0%
Percentile
37.2
In the wild
Unconfirmed
What it is

GeoVision GV-LPC2211 V1.13 fails to limit repeated User elements in ONVIF CreateUsers requests, allowing an authenticated administrator to overwrite stack control state and crash the ONVIF worker.

The record
Technical detail
CVSS v3.1
4.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00440 · 37.2th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2026-09-10T13:17Z
References (1)
https://www.geovision.com.tw/cyber_security.php · 0df08a0e-a200-4957-9bb0-084f562506f9
EPSS history
Timeline
  • 11 SEP 03:19Z
    EPSS moved — → 0%
    epss
  • 10 SEP 08:23Z
    GV-LPC2011/LPC2211 - ONVIF CreateUsers Repeated-Element Stack-Frame Overflow Denial of Service
    cvelistv5