CVE-2026-57877

An unauthenticated format string vulnerability exists in vlsvr in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by improper handling of externally controlled input during log message formatting in the login processing path. A remote attacker may exploit this vulnerability by sending crafted login data, potentially causing information disclosure, memory corruption, or a denial of service.

• CWE-134

• https://www.geovision.com.tw/cyber_security.php

Published

Jun 26, 2026

Last Modified

Jun 26, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-57871Relative path traversal vulnerability in MicroRealEstate fil…7.1
• CVE-2026-57872An unauthenticated directory traversal vulnerability exists …7.5
• CVE-2026-57873An unauthenticated NULL pointer dereference vulnerability ex…7.5
• CVE-2026-57874An unauthenticated buffer overflow vulnerability exists in I…7.5
• CVE-2026-57875An unauthenticated NULL pointer dereference vulnerability ex…7.5
• CVE-2026-57876An unauthenticated out-of-bounds write vulnerability exists …7.5
• CVE-2026-57878An unauthenticated stack-based buffer overflow vulnerability…9.8
• CVE-2026-57879An unauthenticated stack-based buffer overflow vulnerability…9.8
• CVE-2026-5788An Improper Access Control in Ivanti EPMM before versions 12…9.8
• CVE-2026-57880An unauthenticated stack-based buffer overflow vulnerability…9.8
• CVE-2026-57881An unauthenticated stack-based buffer overflow vulnerability…9.8
• CVE-2026-5789Vulnerability related to an unquoted search path in CivetWeb…7.8