CVE-2026-57872 – GV-LPC2011/LPC2211 – unauthorized directory traversal vulnerability (get_fcont.cgi)

CVE ID :CVE-2026-57872

Published : June 26, 2026, 7:17 a.m. | 28 minutes ago

Description :An unauthenticated
directory traversal vulnerability exists in get_fcont.cgi in GeoVision
GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by
insufficient validation of user-supplied file path input before the requested
file is accessed by the CGI component. A remote attacker may exploit this
vulnerability by sending a crafted request to read arbitrary files accessible
to the affected process, resulting in information disclosure.

Severity: 7.5 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…