Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2026-88273

GV-LPC2011/LPC2211 - PPPoE Username Shell-Configuration Command Injection

Description

GeoVision GV-LPC2211 V1.13 allows an administrator-controlled PPPoE username to escape a sourced shell configuration assignment and execute arbitrary commands as root.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

GeoVision Inc. GV-LPC2011/LPC2211

Default version status: unaffected

  • 1.13affected
  • 1.14unaffected

References