CVE-2026-42364
CRITICAL
NVD
CVSS Score
9.9
Severity
CRITICAL
Published
May 04, 2026
Vendor
unknown
Description
An os command injection vulnerability exists in the DdnsSetting.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted DDNS configuration can lead to arbitrary command execution. An attacker can modify a configuration value to trigger this vulnerability.