CVE-2026-88278: GeoVision Inc Gv-LPCLPC2011/2211

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

GeoVision GV-LPC2211 V1.13 fails to enforce WS-Security UsernameToken freshness or nonce reuse protection, allowing a captured PasswordDigest token to be replayed for subsequent ONVIF operations.

Affected products

Published 2026-09-10. Last modified 2026-09-10.