critical9.8
CVE-2026-35546
Anviz CX2 Lite and CX7 are vulnerable to unauthenticated firmware uploads.
Impact
Anviz CX2 Lite and CX7 are vulnerable to unauthenticated firmware uploads. This causes crafted archives to be accepted, enabling attackers to plant and execute code and obtain a reverse shell.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Anviz | Cx7 Firmware | All versions |
| Anviz | Cx2 Lite Firmware | All versions |