Vulnerability Details CVE-2026-31927
Anviz CX7 Firmware is vulnerable to an authenticated CSV upload which allows path traversal
to overwrite arbitrary files (e.g., /etc/shadow), enabling unauthorized
SSH access when combined with debug‑setting changes
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 16.5%
CVSS Severity
CVSS v3 Score 4.9
References
Products affected by CVE-2026-31927
-
cpe:2.3:h:anviz:cx7:-
-
cpe:2.3:o:anviz:cx7_firmware:-