Geovision Inc. - Gv-lpc2011/lpc2211 - CRITICAL - CVE-2026-42364. An OS command injection vulnerability exists within the DdnsSetting.cgi functionality in GeoVision's LPC2011 and LPC2211 products. By crafting a specially designed DDNS configuration, an attacker can manipulate configuration values, enabling the execution of arbitrary commands on the affected device. This vulnerability poses a significant risk as it can lead to unauthorized control and actions that compromise the integrity and security of the affected systems.