CVE-2026-35546 — Anviz Products Missing Authentication for Critical Function
Anviz CX2 Lite and CX7 are vulnerable to unauthenticated firmware uploads. This causes crafted archives to be accepted, enabling attackers to plant and execute code and obtain…
Published: 2026-04-17 · CVSS: 9.8 · CVSS 3.1
Anviz CX2 Lite and CX7 are vulnerable to unauthenticated firmware uploads. This causes crafted archives to be accepted, enabling attackers to plant and execute code and obtain a reverse shell.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7