← Database

CVE-2026-88278

CRITICAL CVSS: 9.8 Published: 2026-09-10 Modified: 2026-09-10

Description

GeoVision GV-LPC2211 V1.13 fails to enforce WS-Security UsernameToken freshness or nonce reuse protection, allowing a captured PasswordDigest token to be replayed for subsequent ONVIF operations.

Affected Platforms

Unknown

Weakness Type

CWE-294

References