Security Advisory

CVE-2026-42364

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-04 00:41:33
Last updated 2026-06-15 19:19:02
Assigner GV
CVSS score 9.9
State PUBLISHED

Description

An os command injection vulnerability exists in the DdnsSetting.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted DDNS configuration can lead to arbitrary command execution. An attacker can modify a configuration value to trigger this vulnerability.