CVE-2026-57881

An unauthenticated stack-based buffer overflow vulnerability exists in vlsvr in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient length validation when processing remote login data. A remote attacker may exploit this vulnerability by sending crafted login data with overly long input, resulting in memory corruption, denial of service, or potentially arbitrary code execution.

• CWE-121

• https://www.geovision.com.tw/cyber_security.php

Published

Jun 26, 2026

Last Modified

Jun 26, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-57876An unauthenticated out-of-bounds write vulnerability exists …7.5
• CVE-2026-57877An unauthenticated format string vulnerability exists in vls…8.6
• CVE-2026-57878An unauthenticated stack-based buffer overflow vulnerability…9.8
• CVE-2026-57879An unauthenticated stack-based buffer overflow vulnerability…9.8
• CVE-2026-5788An Improper Access Control in Ivanti EPMM before versions 12…9.8
• CVE-2026-57880An unauthenticated stack-based buffer overflow vulnerability…9.8
• CVE-2026-5789Vulnerability related to an unquoted search path in CivetWeb…7.8
• CVE-2026-57895Incorrect default permissions issue exists in Pupsman versio…8.5
• CVE-2026-57896An out-of-bounds read vulnerability in the Productivity Suit…6.9
• CVE-2026-57898In Eclipse BaSyx Java Server SDK versions 2.0.0-milestone-05…9
• CVE-2026-5790Stored Cross-Site Scripting (XSS) in Stel Order v3.25.1 and …5.1
• CVE-2026-5791Cross-Site request forgery (CSRF) vulnerability in DivvyDriv…6.5