CVE-2026-88287: GeoVision Inc Gv-LPC2011/LPC2211

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

GeoVision GV-LPC2211 V1.13 fails to bound the number of Scopes tokens in unauthenticated ONVIF WS-Discovery Probe requests, allowing a remote attacker to corrupt stack control state and crash the discovery process.

Affected products

• GeoVision Inc Gv-LPC2011/LPC2211: version 1.13 only

Published 2026-09-10. Last modified 2026-09-10.