CVE detail
CVE-2026-42365
A guessable session cookie vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted series of HTTP requests can lead to an authentication bypas. An attacker can bruteforce session cookies to trigger this vulnerability.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 16.1 · diversity 16.5 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 1
- within the 30d window
- Peak daily
- 1
- highest bucket
Evidence
Source links by recency
4 source links · newest first
oduct to provide secure data transfer. Talos discovered two improper input validation vulnerabilities (TALOS-2026-2409 (CVE-2026-28739) and TALOS-2026-2410 (CVE-2026-25106)) and one integer underflow vulnerability (TALOS-2026-2408 (CVE-2026-33091)) in WolfSSL. ## **GeoVision vulnerabilities** _Discovered by Philippe Laulheret of Cisco Talos._ GeoVision
newsblog.talosintelligence.comJul 9, 2026, 6:53 PM- https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2332www.talosintelligence.com
No excerpt available.
Exploitwww.talosintelligence.comMay 4, 2026, 1:16 AM - https://www.geovision.com.tw/cyber_security.phpwww.geovision.com.tw
No excerpt available.
Vendor Advisorywww.geovision.com.twMay 4, 2026, 1:16 AM - https://talosintelligence.com/vulnerability_reports/talosintelligence.com
No excerpt available.
Exploittalosintelligence.comMay 4, 2026, 1:16 AM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-7371CVSS 7.4 · High
Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted malicious u…
- CVE-2026-42368CVSS 9.9 · Critical
A privilege escalation vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted HTTP request can lead to execute priviledged…
- CVE-2026-42367CVSS 6.5 · Medium
A privilege escalation vulnerability exists in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted HTTP request can lead to credential…
- CVE-2026-42366CVSS 7.4 · High
Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted malicious u…
- CVE-2026-42364CVSS 9.9 · Critical
An os command injection vulnerability exists in the DdnsSetting.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted DDNS configuration can lead to arbitrary c…
- CVE-2026-38968CVSS 9.8 · Critical
ntopng through 6.6 is vulnerable to Predictable Session Identifier which can lead to Session Hijacking. HTTP session identifiers in src/HTTPserver.cpp use weak time-seeded pseudo-…