https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sat, 30 May 2026 21:45:10 +0000 https://vulnerability.circl.lu/sighting/a5d8fca9-a16c-4d84-93c5-fa7d437cb448/export {"uuid": "a5d8fca9-a16c-4d84-93c5-fa7d437cb448", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42369", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116514778449951013", "content": "\ud83d\udea8 CVE-2026-42369 (CRITICAL, CVSS 10): GeoVision GV-VMS V20.0.2 stack overflow in gvapi endpoint lets unauthenticated remote attackers execute code as SYSTEM. Restrict remote access, monitor for patches. https://radar.offseq.com/threat/cve-2026-42369-cwe-787-out-of-bounds-write-in-geov-0757b787 #OffSeq #CVE202642369 #infosec #zeroday", "creation_timestamp": "2026-05-04T06:00:31.183284Z"} {"uuid": "a5d8fca9-a16c-4d84-93c5-fa7d437cb448", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42369", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116514778449951013", "content": "\ud83d\udea8 CVE-2026-42369 (CRITICAL, CVSS 10): GeoVision GV-VMS V20.0.2 stack overflow in gvapi endpoint lets unauthenticated remote attackers execute code as SYSTEM. Restrict remote access, monitor for patches. https://radar.offseq.com/threat/cve-2026-42369-cwe-787-out-of-bounds-write-in-geov-0757b787 #OffSeq #CVE202642369 #infosec #zeroday", "creation_timestamp": "2026-05-04T06:00:31.183284Z"} https://vulnerability.circl.lu/sighting/a5d8fca9-a16c-4d84-93c5-fa7d437cb448/export Mon, 04 May 2026 06:00:31 +0000 https://vulnerability.circl.lu/sighting/c849bd34-f1b0-424c-bc55-f06ebcf4d98c/export {"uuid": "c849bd34-f1b0-424c-bc55-f06ebcf4d98c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42369", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mkzbmxfeo22a", "content": "\ud83d\udea8 Critical flaw in CVE-2026-42369 affects GeoVision GV-VMS V20 (CVSS 10.0). Unauthenticated attackers can gain full SYSTEM access via the WebCam Server. \n\n\ud83d\udd17 basefortify.eu/cve_reports/... \n\n#CVE #CyberSecurity #GeoVision", "creation_timestamp": "2026-05-04T08:41:41.153344Z"} {"uuid": "c849bd34-f1b0-424c-bc55-f06ebcf4d98c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42369", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mkzbmxfeo22a", "content": "\ud83d\udea8 Critical flaw in CVE-2026-42369 affects GeoVision GV-VMS V20 (CVSS 10.0). Unauthenticated attackers can gain full SYSTEM access via the WebCam Server. \n\n\ud83d\udd17 basefortify.eu/cve_reports/... \n\n#CVE #CyberSecurity #GeoVision", "creation_timestamp": "2026-05-04T08:41:41.153344Z"} https://vulnerability.circl.lu/sighting/c849bd34-f1b0-424c-bc55-f06ebcf4d98c/export Mon, 04 May 2026 08:41:41 +0000 https://vulnerability.circl.lu/sighting/2d8afbe9-2ebc-4e45-b63c-bbe5b123330f/export {"uuid": "2d8afbe9-2ebc-4e45-b63c-bbe5b123330f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42369", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mkzbmysrs22a", "content": "\ud83d\udea8 Critical flaw in CVE-2026-42369 affects GeoVision GV-VMS V20 (CVSS 10.0). Unauthenticated attackers can gain full SYSTEM access via the WebCam Server. \n\n\ud83d\udd17 basefortify.eu/cve_reports/... \n\n#CVE #CyberSecurity #GeoVision", "creation_timestamp": "2026-05-04T08:41:43.094535Z"} {"uuid": "2d8afbe9-2ebc-4e45-b63c-bbe5b123330f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42369", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mkzbmysrs22a", "content": "\ud83d\udea8 Critical flaw in CVE-2026-42369 affects GeoVision GV-VMS V20 (CVSS 10.0). Unauthenticated attackers can gain full SYSTEM access via the WebCam Server. \n\n\ud83d\udd17 basefortify.eu/cve_reports/... \n\n#CVE #CyberSecurity #GeoVision", "creation_timestamp": "2026-05-04T08:41:43.094535Z"} https://vulnerability.circl.lu/sighting/2d8afbe9-2ebc-4e45-b63c-bbe5b123330f/export Mon, 04 May 2026 08:41:43 +0000 https://vulnerability.circl.lu/sighting/4a9b500e-07c8-4954-8f32-cc638d52b7a3/export {"uuid": "4a9b500e-07c8-4954-8f32-cc638d52b7a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42369", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mkzbn3lrh22a", "content": "\ud83d\udea8 Critical flaw in CVE-2026-42369 affects GeoVision GV-VMS V20 (CVSS 10.0). Unauthenticated attackers can gain full SYSTEM access via the WebCam Server. \n\n\ud83d\udd17 basefortify.eu/cve_reports/... \n\n#CVE #CyberSecurity #GeoVision", "creation_timestamp": "2026-05-04T08:41:43.757601Z"} {"uuid": "4a9b500e-07c8-4954-8f32-cc638d52b7a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42369", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mkzbn3lrh22a", "content": "\ud83d\udea8 Critical flaw in CVE-2026-42369 affects GeoVision GV-VMS V20 (CVSS 10.0). Unauthenticated attackers can gain full SYSTEM access via the WebCam Server. \n\n\ud83d\udd17 basefortify.eu/cve_reports/... \n\n#CVE #CyberSecurity #GeoVision", "creation_timestamp": "2026-05-04T08:41:43.757601Z"} https://vulnerability.circl.lu/sighting/4a9b500e-07c8-4954-8f32-cc638d52b7a3/export Mon, 04 May 2026 08:41:43 +0000 https://vulnerability.circl.lu/sighting/7b1695d7-0a13-40a4-b7e9-20070b2acc59/export {"uuid": "7b1695d7-0a13-40a4-b7e9-20070b2acc59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42368", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116515840100676025", "content": "\ud83c\udf10 CVE-2026-42368 | CRITICAL privilege escalation in GeoVision GV-LPC2011/LPC2211 v1.10. Remote attackers can gain full control via crafted HTTP requests. No patch \u2014 restrict web interface access & monitor traffic. Details: https://radar.offseq.com/threat/cve-2026-42368-cwe-266-incorrect-privilege-assignm-b84e399c #OffSeq #Vuln #IoT #CyberSecurity", "creation_timestamp": "2026-05-04T10:30:27.922246Z"} {"uuid": "7b1695d7-0a13-40a4-b7e9-20070b2acc59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42368", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116515840100676025", "content": "\ud83c\udf10 CVE-2026-42368 | CRITICAL privilege escalation in GeoVision GV-LPC2011/LPC2211 v1.10. Remote attackers can gain full control via crafted HTTP requests. No patch \u2014 restrict web interface access & monitor traffic. Details: https://radar.offseq.com/threat/cve-2026-42368-cwe-266-incorrect-privilege-assignm-b84e399c #OffSeq #Vuln #IoT #CyberSecurity", "creation_timestamp": "2026-05-04T10:30:27.922246Z"} https://vulnerability.circl.lu/sighting/7b1695d7-0a13-40a4-b7e9-20070b2acc59/export Mon, 04 May 2026 10:30:27 +0000 https://vulnerability.circl.lu/sighting/c281fb92-cf26-4ec5-aa8d-91859aecd2c7/export {"uuid": "c281fb92-cf26-4ec5-aa8d-91859aecd2c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42368", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mkzhppcbyr2o", "content": "CRITICAL: GeoVision GV-LPC2011/LPC2211 v1.10 has a severe privilege escalation flaw. Restrict web access & monitor HTTP requests \u2014 no patch yet. Protect your devices! https://radar.offseq.com/threat/cve-2026-42368-cwe-266-incorrect-privilege-assignm-b84e399c #OffSeq #Vulnerability #IoTSecurity", "creation_timestamp": "2026-05-04T10:30:29.375888Z"} {"uuid": "c281fb92-cf26-4ec5-aa8d-91859aecd2c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42368", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mkzhppcbyr2o", "content": "CRITICAL: GeoVision GV-LPC2011/LPC2211 v1.10 has a severe privilege escalation flaw. Restrict web access & monitor HTTP requests \u2014 no patch yet. Protect your devices! https://radar.offseq.com/threat/cve-2026-42368-cwe-266-incorrect-privilege-assignm-b84e399c #OffSeq #Vulnerability #IoTSecurity", "creation_timestamp": "2026-05-04T10:30:29.375888Z"} https://vulnerability.circl.lu/sighting/c281fb92-cf26-4ec5-aa8d-91859aecd2c7/export Mon, 04 May 2026 10:30:29 +0000 https://vulnerability.circl.lu/sighting/5fffef79-c9d0-4289-991a-ec2b8b762e4a/export {"uuid": "5fffef79-c9d0-4289-991a-ec2b8b762e4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42368", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3ml3cr4g2zt2s", "content": "\ud83d\udccc CVE-2026-42368 - A privilege escalation vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted HTTP request can... https://www.cyberhub.blog/cves/CVE-2026-42368", "creation_timestamp": "2026-05-05T04:07:08.709882Z"} {"uuid": "5fffef79-c9d0-4289-991a-ec2b8b762e4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42368", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3ml3cr4g2zt2s", "content": "\ud83d\udccc CVE-2026-42368 - A privilege escalation vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted HTTP request can... https://www.cyberhub.blog/cves/CVE-2026-42368", "creation_timestamp": "2026-05-05T04:07:08.709882Z"} https://vulnerability.circl.lu/sighting/5fffef79-c9d0-4289-991a-ec2b8b762e4a/export Tue, 05 May 2026 04:07:08 +0000 https://vulnerability.circl.lu/sighting/05d41c02-0d68-49da-b5f2-ea4291a0f3ef/export {"uuid": "05d41c02-0d68-49da-b5f2-ea4291a0f3ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42365", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3ml3hs3742i2v", "content": "\ud83d\udccc CVE-2026-42365 - A guessable session cookie vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted series of HT... https://www.cyberhub.blog/cves/CVE-2026-42365", "creation_timestamp": "2026-05-05T05:37:07.923869Z"} {"uuid": "05d41c02-0d68-49da-b5f2-ea4291a0f3ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42365", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3ml3hs3742i2v", "content": "\ud83d\udccc CVE-2026-42365 - A guessable session cookie vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted series of HT... https://www.cyberhub.blog/cves/CVE-2026-42365", "creation_timestamp": "2026-05-05T05:37:07.923869Z"} https://vulnerability.circl.lu/sighting/05d41c02-0d68-49da-b5f2-ea4291a0f3ef/export Tue, 05 May 2026 05:37:07 +0000 https://vulnerability.circl.lu/sighting/ce747fa4-dc42-4e09-8563-a9895712f982/export {"uuid": "ce747fa4-dc42-4e09-8563-a9895712f982", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42366", "type": "seen", "source": "https://bsky.app/profile/keiwork35.bsky.social/post/3mlxwdselvi2h", "content": "\u3010\u8106\u5f31\u6027\u60c5\u5831\u3011 CVE-2026-42366 GeoVision LPC2011/LPC2211\u00a01.10\u306e\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\n\nGeoVision LPC2011/LPC2211 1.10\u306eWeb Interface / ssi.cgi\u6a5f\u80fd\u306b\u8907\u6570\u306e\u53cd\u5c04\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\u8106\u5f31\u6027\u304c\u5b58\u5728\u3057\u307e\u3059\u3002", "creation_timestamp": "2026-05-16T13:12:07.550279Z"} {"uuid": "ce747fa4-dc42-4e09-8563-a9895712f982", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42366", "type": "seen", "source": "https://bsky.app/profile/keiwork35.bsky.social/post/3mlxwdselvi2h", "content": "\u3010\u8106\u5f31\u6027\u60c5\u5831\u3011 CVE-2026-42366 GeoVision LPC2011/LPC2211\u00a01.10\u306e\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\n\nGeoVision LPC2011/LPC2211 1.10\u306eWeb Interface / ssi.cgi\u6a5f\u80fd\u306b\u8907\u6570\u306e\u53cd\u5c04\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\u8106\u5f31\u6027\u304c\u5b58\u5728\u3057\u307e\u3059\u3002", "creation_timestamp": "2026-05-16T13:12:07.550279Z"} https://vulnerability.circl.lu/sighting/ce747fa4-dc42-4e09-8563-a9895712f982/export Sat, 16 May 2026 13:12:07 +0000 https://vulnerability.circl.lu/sighting/4a2bf48e-2239-4692-84fb-d6305f31d24f/export {"uuid": "4a2bf48e-2239-4692-84fb-d6305f31d24f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42364", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmp2zlx4ie2r", "content": "\ud83d\udccc CVE-2026-42364 - An os command injection vulnerability exists in the DdnsSetting.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted DDNS configur... https://www.cyberhub.blog/cves/CVE-2026-42364", "creation_timestamp": "2026-05-25T18:07:08.445895Z"} {"uuid": "4a2bf48e-2239-4692-84fb-d6305f31d24f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42364", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmp2zlx4ie2r", "content": "\ud83d\udccc CVE-2026-42364 - An os command injection vulnerability exists in the DdnsSetting.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted DDNS configur... https://www.cyberhub.blog/cves/CVE-2026-42364", "creation_timestamp": "2026-05-25T18:07:08.445895Z"} https://vulnerability.circl.lu/sighting/4a2bf48e-2239-4692-84fb-d6305f31d24f/export Mon, 25 May 2026 18:07:08 +0000