← Database

CVE-2026-35546

CRITICAL CVSS: 9.8 Published: 2026-04-17 Modified: 2026-06-17

Description

Anviz CX2 Lite and CX7 are vulnerable to unauthenticated firmware uploads. This causes crafted archives to be accepted, enabling attackers to plant and execute code and obtain a reverse shell.

Affected Platforms

Anviz Cx7Anviz Cx2 LiteAnviz Cx7 FirmwareAnviz Cx2 Lite Firmware

Weakness Type

CWE-306

References