EUVD-2026-26856CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Lifecycle Timeline
4DescriptionNVD
A guessable session cookie vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted series of HTTP requests can lead to an authentication bypas. An attacker can bruteforce session cookies to trigger this vulnerability.
AnalysisAI
Session cookie predictability in GeoVision LPC2011/LPC2211 1.10 web interface allows remote attackers to bypass authentication via brute-force enumeration of session tokens. Successful exploitation grants unauthorized access to the camera management interface with full privileges of valid users. …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Identify all GeoVision LPC2011/LPC2211 devices running version 1.10 in your environment and document their network locations and business criticality. Within 7 days: Isolate affected devices to segregated VLANs with restricted network access; implement network-level authentication (VPN/firewall rules) for all management traffic. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today