CVE-2026-42365

HighCVSS 8.6

Published: 04/05/2026(UTC)Updated: 15/06/2026(UTC)Translated: 16/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.33%

24th percentile - higher than 24% of all known CVEs

Summary

A guessable session cookie vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted series of HTTP requests can lead to an authentication bypass.

Risk Assessment

An attacker can exploit this vulnerability to hijack user sessions, posing a serious security threat to the system.

Recommendation

It is recommended to implement stronger session cookie generation mechanisms and to monitor logs for suspicious activities.

Other vulnerabilities in GeoVision LPC2011/LPC2211 Web Interface

CVE-2026-42368Critical
A privilege escalation vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted HTTP request can lead to execute privileged operation.

Original NVD description (English source)

A guessable session cookie vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted series of HTTP requests can lead to an authentication bypas. An attacker can bruteforce session cookies to trigger this vulnerability.