Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-88290

GV-LPC2011/LPC2211 - Unauthenticated VLSVR Slowloris and Memory Resource Exhaustion

CVSS 3.1 7.5 HIGHCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-88290

Published

GeoVision GV-LPC2211 V1.14 (260903) allows unauthenticated clients to declare unbounded VLSVR frame lengths and indefinitely delay blocking receives, allowing remote exhaustion of memory, connection, and worker resources.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-88290

Published

GV-LPC2011/LPC2211

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "GeoVision Inc.",
                    "product": "GV-LPC2011/LPC2211",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "1.14 20260903"
                        },
                        {
                            "status": "unaffected",
                            "version": "1.14 20260909"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

Original source record · Cite this exact observation · Complete original publisher JSON