CVE-2026-88273

GeoVision GV-LPC2211 V1.13 is vulnerable to a command injection flaw due to improper handling of an administrator-controlled PPPoE username, allowing attackers to execute arbitrary commands with root privileges. This high-severity vulnerability poses a significant risk to systems using this product, particularly in environments where administrative access is exposed. Organizations utilizing this device should prioritize patching or mitigating this vulnerability to prevent potential exploitation.