Vulnerability Details CVE-2026-35546
Anviz CX2 Lite and CX7 are vulnerable to unauthenticated firmware uploads. This causes crafted
archives to be accepted, enabling attackers to plant and execute code
and obtain a reverse shell.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 22.9%
CVSS Severity
CVSS v3 Score 9.8
References
Products affected by CVE-2026-35546
-
cpe:2.3:h:anviz:cx2_lite:-
-
cpe:2.3:h:anviz:cx7:-
-
cpe:2.3:o:anviz:cx2_lite_firmware:-
-
cpe:2.3:o:anviz:cx7_firmware:-