CVE-2026-42365 HIGH

CVE-2026-42365: GeoVision LPC2011/LPC2211 Web Interface guessable session cookie vulnerability

Vendor Geovision Inc.
Product GV-LPC2011/LPC2211
Weakness CWE-341
Published May 4, 2026
Last update June 15, 2026
View on NVD All CVEs

CVSS base score

8.6/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

What the vulnerability does

01Description

A guessable session cookie vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted series of HTTP requests can lead to an authentication bypas. An attacker can bruteforce session cookies to trigger this vulnerability.

Key dates

02Disclosure timeline

May 4, 2026 CVE published
June 15, 2026 Record updated