CVE-2026-42367

6.5 MEDIUM

A privilege escalation vulnerability exists in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10

Published: 2026-05-04 · Last updated: 2026-06-15

Severity and scoring

CVSS: 6.5 MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CWE: CWE-522

Affected products

Vendor	Product
geovision	gv-lpc2011_firmware, gv-lpc2211_firmware

Description

A privilege escalation vulnerability exists in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted HTTP request can lead to credentials leak. An attacker can visit a webpage to trigger this vulnerability.

Source: NVD

References

[NVD]https://nvd.nist.gov/vuln/detail/CVE-2026-42367
[Other]https://talosintelligence.com/vulnerability_reports/
[Vendor advisory]https://www.geovision.com.tw/cyber_security.php
[Other]https://www.talosintelligence.com/vulnerability_reports/TALOS-2026-2328

Related CVEs

Same vendor

CVE-2026-7161 — An insufficient encryption vulnerability exists in the Device Authentication functionality of GeoVision GV-IP Device Utility 9.0.5 (9.3 CRITICAL)
CVE-2026-42370 — A stack overflow vulnerability exists in the WebCam Server Login functionality of GeoVision GV-VMS V20 20.0.2 (9.0 CRITICAL)
CVE-2026-42368 — A privilege escalation vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10 (9.9 CRITICAL)
CVE-2026-42365 — A guessable session cookie vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10 (8.6 HIGH)
CVE-2026-42364 — An os command injection vulnerability exists in the DdnsSetting.cgi functionality of GeoVision LPC2011/LPC2211 1.10 (9.9 CRITICAL)

Same CWE

CVE-2026-53840 — OpenClaw before 2026.5.12 contains an information disclosure vulnerability in streamable-http MCP servers that forwards operator-configur... (7.1 HIGH)
CVE-2026-6517 — Mattermost Desktop App versions <=6.1 5.5.13.0 fail to restrict the allow list of domains to which NTLM credentials were forwarded to in ... (6.3 MEDIUM)
CVE-2026-49949 — CodexBar before 0.33.0 contains a credential forwarding vulnerability that allows network-adjacent attackers to intercept sensitive crede... (5.3 MEDIUM)
CVE-2024-45636 — IBM Security QRadar EDR 3.12 through 3.12.24 stores user credentials in plain text which can be read by a local privileged user (4.1 MEDIUM)
CVE-2026-41715 — In specific scenarios involving HTTP redirects from a secure to an insecure endpoint, the Reactor Netty HTTP client may leak credentials (6.1 MEDIUM)