一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月10日

CVE-2026-88288 [MEDIUM] – GeoVision GV-LPC2211 V1.13 fails to restrict the filename supplied to BKDownloadLink.cgi,

未分类
📑 文章目录

GeoVision GV-LPC2211 V1.13 fails to restrict the filename supplied to BKDownloadLink.cgi, allowing a remote user with valid web credentials to read arbitrary files accessible to the root-run web service.