Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2026-88282

GV-LPCLPC2011/2211 - Stored FTP-Username Command Injection

Description

GeoVision GV-LPC2211 V1.13 allows an administrator-controlled FTP username containing shell metacharacters to be executed as arbitrary root commands during a subsequent FTP-account update.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

GeoVision Inc. GV-LPCLPC2011/2211

Default version status: unaffected

  • 1.13affected
  • 1.14unaffected

References