PatchTheCVEgv-lpc2011 firmware vulnerabilities and fixes
Recent CVEs affecting gv-lpc2011 firmware, with upgrade or downgrade steps. 6 tracked.
Also searched as: gv lpc2011 firmware, gv-lpc2011firmware.
gv-lpc2011 firmware has 6 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-05-04. Highest priority: CVE-2026-42364 (score 54/100).
- CVE-2026-42364 CRITICAL 9.9 MITIGATE MITIGATE An os command injection vulnerability exists in the DdnsSetting.cgi functionality of GeoVision LPC2011/LPC2211
- CVE-2026-42365 HIGH 8.6 MITIGATE MITIGATE A guessable session cookie vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC221
- CVE-2026-42368 CRITICAL 9.9 MITIGATE MITIGATE A privilege escalation vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.
- CVE-2026-42366 HIGH 7.4 MITIGATE MITIGATE Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionali
- CVE-2026-42367 MEDIUM 6.5 MITIGATE MITIGATE A privilege escalation vulnerability exists in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/
- CVE-2026-7371 HIGH 7.4 MITIGATE MITIGATE Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionali
FAQ
How do I fix gv-lpc2011 firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is gv-lpc2011 firmware being exploited right now?
None of the tracked gv-lpc2011 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which gv-lpc2011 firmware CVE should I patch first?
CVE-2026-42364 currently ranks highest (54/100): An os command injection vulnerability exists in the DdnsSetting.cgi functionality of GeoVision LPC2011/LPC2211.