CVE-2026-42365
High · 8.6CVSS
8.6
EPSS
0.6%
Published
May 4, 2026
CISA due date
—
The record
A guessable session cookie vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted series of HTTP requests can lead to an authentication bypas. An attacker can bruteforce session cookies to trigger this vulnerability.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-87913 A missing S3 bucket ownership verification in the AWS Security Agent MCP server before… CWE-341
- CVE-2026-87912 A missing S3 bucket ownership verification in the AWS Security Agent plugin in Amazon… CWE-341
- CVE-2026-15571 A flaw was found in the legacy client-initiated account-linking endpoint of Keycloak, a… CWE-341
- CVE-2026-38968 ntopng through 6.6 is vulnerable to Predictable Session Identifier which can lead to… CWE-341
- CVE-2026-36609 Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 uses a static… CWE-341