CVE-2026-88278
CRITICAL
NVD
CVSS Score
9.8
Severity
CRITICAL
Published
Sep 10, 2026
Vendor
unknown
Description
GeoVision GV-LPC2211 V1.13 fails to enforce WS-Security UsernameToken freshness or nonce reuse protection, allowing a captured PasswordDigest token to be replayed for subsequent ONVIF operations.