CVE-2026-42366

HIGH

GeoVision LPC2011/LPC2211 Web Interface / ssi.cgi reflected cross-site scripting (XSS) vulnerabilities

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2026-42366 has a selected CVSS score of 7.4 (high).

Description

Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted malicious url can lead to an arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated May 4, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

GV-LPC2011/LPC2211

Browse GeoVision Inc. / GV-LPC2011/LPC2211

Default status: unaffected

CVE ListV1.10affected
V1.20unaffected

References

3