CVE-2026-88281 is a stack-based buffer overflow vulnerability (CWE-121) in GeoVision GV-LPC2211 version 1.13. The flaw arises because the software fails to limit the number of repeated Username elements in ONVIF DeleteUsers requests. An authenticated administrator can exploit this to overflow a stack array, causing the ONVIF worker to crash, resulting in denial of service. There is no indication of confidentiality or integrity impact. No patch or official remediation is currently documented.

The vulnerability allows an authenticated administrator to cause a denial of service by crashing the ONVIF worker process through a stack-based buffer overflow. There is no reported impact on confidentiality or integrity. Exploitation requires administrator privileges, limiting the attack surface. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict administrative access to trusted personnel only to prevent exploitation. Monitor for vendor updates regarding patches or mitigations.