CVE-2026-88285

critical · 9.4

GeoVision GV-LPC2211 V1.13 exposes a network-accessible PTZ control service without authentication, allowing remote clients to retrieve PTZ information and issue PTZ or raw serial commands.

9.4

CVSS

0.5%

EPSS (exploit prob.)

43rd

EPSS percentile

2026-09-10

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

Weaknesses

CWE-306

References

https://www.geovision.com.tw/cyber_security.php

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-88285