PatchTheCVEgeovision vulnerabilities
Recent CVEs affecting geovision products. 9 tracked.
geovision has 9 tracked vulnerabilities, 5 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-05-04. Highest priority: CVE-2026-42364 (score 54/100).
- CVE-2026-42364 CRITICAL 9.9 MITIGATE MITIGATE An os command injection vulnerability exists in the DdnsSetting.cgi functionality of GeoVision LPC2011/LPC2211
- CVE-2026-42370 CRITICAL 9.0 UPGRADE A stack overflow vulnerability exists in the WebCam Server Login functionality of GeoVision GV-VMS V20 20.0.2
- CVE-2026-7372 CRITICAL 9.0 UPGRADE A stack overflow vulnerability exists in the WebCam Server Login functionality of GeoVision GV-VMS V20 20.0.2
- CVE-2026-42365 HIGH 8.6 MITIGATE MITIGATE A guessable session cookie vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC221
- CVE-2026-42368 CRITICAL 9.9 MITIGATE MITIGATE A privilege escalation vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.
- CVE-2026-7161 CRITICAL 9.3 DOWNGRADE An insufficient encryption vulnerability exists in the Device Authentication functionality of GeoVision GV-IP
- CVE-2026-42366 HIGH 7.4 MITIGATE MITIGATE Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionali
- CVE-2026-42367 MEDIUM 6.5 MITIGATE MITIGATE A privilege escalation vulnerability exists in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/
- CVE-2026-7371 HIGH 7.4 MITIGATE MITIGATE Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionali
FAQ
How do I fix geovision vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is geovision being exploited right now?
None of the tracked geovision CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which geovision CVE should I patch first?
CVE-2026-42364 currently ranks highest (54/100): An os command injection vulnerability exists in the DdnsSetting.cgi functionality of GeoVision LPC2011/LPC2211.