Is CVE-2026-57873 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-57873 being exploited in the wild.

How severe is CVE-2026-57873?

High severity, with a CVSS score of 7.5, published 26 June 2026.

Which products and versions are affected?

Geovision Gv-Lpc2011 1.12 and earlier; Geovision Gv-Lpc2211 1.12 and earlier.

Is there a fix for CVE-2026-57873?

A patch was published on 2026-06-26: Fixed in version 1.13 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-57873 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-57873?

Check whether you run Geovision Gv-Lpc2011 or Geovision Gv-Lpc2211 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-57873: GeoVision GV-LPC series NULL pointer dereference in IEEE8021x_upload.cgi

CVE-2026-57873 · Severity: high · CVSS 7.5 · Published 2026-06-26

GeoVision license plate recognition cameras are affected by a security flaw that allows an unauthenticated attacker to crash the device remotely. By sending a specially crafted web request to the camera's certificate upload component, an attacker can trigger a system failure, leading to a total loss of availability for surveillance and monitoring operations. This could be used to disable security cameras before or during a physical security breach.

Technologies: Geovision Gv-Lpc2011, Geovision Gv-Lpc2211. Vendors: Geovision.

Quick answers

Is CVE-2026-57873 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-57873 being exploited in the wild.
How severe is CVE-2026-57873?: High severity, with a CVSS score of 7.5, published 26 June 2026.
Which products and versions are affected?: Geovision Gv-Lpc2011 1.12 and earlier; Geovision Gv-Lpc2211 1.12 and earlier.
Is there a fix for CVE-2026-57873?: A patch was published on 2026-06-26: Fixed in version 1.13 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-57873 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-57873?: Check whether you run Geovision Gv-Lpc2011 or Geovision Gv-Lpc2211 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An unauthenticated NULL pointer dereference vulnerability exists in the IEEE8021x_upload.cgi component of GeoVision GV-LPC2011 and GV-LPC2211 cameras. The issue stems from improper validation of multipart upload headers when the CGI process handles certificate-related upload fields. A remote, unauthenticated attacker can exploit this by sending a malformed multipart request, causing the CGI process to crash. This results in a denial of service (DoS) condition for the camera's web management and potentially its core functions. The vulnerability is addressed in firmware version 1.13.

Affected products

GeoVision GV-LPC2011 1.12 and earlier
GeoVision GV-LPC2211 1.12 and earlier

Timeline

2026-06-26: disclosed
2026-06-26: advisory
2026-06-26: patched: Fixed in version 1.13

References

https://www.geovision.com.tw/cyber_security.php

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.