GeoVision GV-LPC2211 V1.13 fails to restrict the filename supplied to BKDownloadLink.cgi, allowing a remote user with valid web credentials to read arbitrary files accessible to the root-run web service.
2026年9月10日
CVE-2026-88288 [MEDIUM] – GeoVision GV-LPC2211 V1.13 fails to restrict the filename supplied to BKDownloadLink.cgi,
📑 文章目录



