Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2026-88272

GV-LPC2011/LPC2211 - Stored Administrator-Username Command Injection

Description

GeoVision GV-LPC2211 V1.13 allows an administrator-controlled username containing shell metacharacters to be executed as arbitrary root commands when the stored username is later deleted.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

GeoVision Inc. GV-LPC2011/LPC2211

Default version status: unaffected

  • 1.13affected
  • 1.14unaffected

References