CVE-2026-88283 is a stack-based buffer overflow vulnerability (CWE-121) in GeoVision GV-LPC2211 version 1.13. The flaw arises because the software does not properly limit the number of repeated User elements in ONVIF CreateUsers requests. An authenticated administrator can exploit this to overwrite stack control data, leading to a crash of the ONVIF worker process and resulting in denial of service. The vulnerability requires high privileges (authenticated administrator) and no user interaction. There is no known exploit in the wild and no vendor-provided remediation or patch information is currently available.

The vulnerability impacts availability by allowing an authenticated administrator to crash the ONVIF worker process via a crafted request, causing denial of service. There is no impact on confidentiality or integrity according to the CVSS vector. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or workaround is currently documented, restrict administrative access to trusted personnel and monitor for unusual ONVIF CreateUsers request activity to reduce risk.