TI-2026-27656 CVE-2026-35546 · GHSA-98hc-x583-4p47
Anviz Products Missing Authentication for Critical Function
Priority MEDIUM 50
Anviz CX2 Lite and CX7 are vulnerable to unauthenticated firmware uploads.
Anviz
Records21All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high10CVSS 7.0–8.9
Exploited now
Anviz records in CISA KEVNo Anviz vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
6 records in Cx2 Lite Firmware · all components
TI-2026-27779 CVE-2026-35682 · GHSA-5j27-2fpm-q949
Anviz CX2 Lite Command Injection
Priority MEDIUM 44
Anviz CX2 Lite is vulnerable to an authenticated command injection via a filename parameter that enables arbitrary command execution (e.g., starting telnetd), resulting in root‑level access.
TI-2026-28897 CVE-2026-40066 · GHSA-wh3w-c78x-9663
Anviz Products Download of Code Without Integrity Check
Priority MEDIUM 40
Anviz CX2 Lite and CX7 are vulnerable to unverified update packages that can be uploaded.
TI-2026-29213 CVE-2026-40461 · GHSA-w67w-38wc-vr97
Anviz Products Missing Authentication for Critical Function
Priority LOW 39
Anviz CX2 Lite and CX7 are vulnerable to unauthenticated POST requests that modify debug settings (e.g., enabling SSH), allowing unauthorized state changes that can facilitate later compromise.
TI-2026-25156 CVE-2026-32648 · GHSA-p7jp-59qp-fjf3
Anviz Products Missing Authorization
Priority LOW 30
Anviz CX2 Lite and CX7 are vulnerable to unauthenticated access that discloses debug configuration details (e.g., SSH/RTTY status), assisting attackers in reconnaissance against the device.
TI-2026-25953 CVE-2026-33569 · GHSA-pxw3-r2m4-c5m3
Anviz Products Cleartext Transmission of Sensitive Information
Priority LOW 28
Anviz CX2 Lite and CX7 administrative sessions occur over HTTP, enabling on‑path attackers to sniff credentials and session data, which can be used to compromise the device.