Anviz CX2 Lite and CX7 firmware are vulnerable to unauthenticated remote code execution through unverified update packages.

🚨 EUVD-2026-23498 📊 Score: 7.5/10 (CVSS v3.1) 📦 Product: Anviz CX7 Firmware, Anviz CX2 Lite Firmware 🏢 Vendor: Anviz 📅 Updated: 2026-04-17 📝 Anviz CX2 Lite and CX7 are vulnerable to unauthenticated POST requests that modify debug settings (e.g., enabling SSH), allowing unauthorized state changes that can facilitate later compromise. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-23498 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-23480 📊 Score: 5.3/10 (CVSS v3.1) 📦 Product: Anviz CX7 Firmware 🏢 Vendor: Anviz 📅 Updated: 2026-04-17 📝 Anviz CX7 Firmware is vulnerable to an unauthenticated POST to the device that captures a photo with the front facing camera, exposing visual information about the deployment environment. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-23480 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-23488 📊 Score: 5.3/10 (CVSS v3.1) 📦 Product: Anviz CX7 Firmware 🏢 Vendor: Anviz 📅 Updated: 2026-04-17 📝 Anviz CX7 Firmware is vulnerable to the most recently captured test photo that can be retrieved without authentication, revealing sensitive operational imagery. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-23488 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-23476 📊 Score: 7.7/10 (CVSS v3.1) 📦 Product: Anviz CX7 Firmware 🏢 Vendor: Anviz 📅 Updated: 2026-04-17 📝 Anviz CX7 Firmware is vulnerable because the application embeds reusable certificate/key material, enabling decryption of MQTT traffic and potential interaction with device messaging channels at scale. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-23476 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-23470 📊 Score: 4.9/10 (CVSS v3.1) 📦 Product: Anviz CX7 Firmware 🏢 Vendor: Anviz 📅 Updated: 2026-04-17 📝 Anviz CX7 Firmware is vulnerable to an authenticated CSV upload which allows path traversal to overwrite arbitrary files (e.g., /etc/shadow), enabling unauthorized SSH access when combined with debug‑setting changes 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-23470 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-23484 📊 Score: 6.5/10 (CVSS v3.1) 📦 Product: Anviz CX2 Lite Firmware, Anviz CX7 Firmware 🏢 Vendor: Anviz 📅 Updated: 2026-04-17 📝 Anviz CX2 Lite and CX7 administrative sessions occur over HTTP, enabling on‑path attackers to sniff credentials and session data, which can be used to compromise the device. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-23484 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-23478 📊 Score: 5.3/10 (CVSS v3.1) 📦 Product: Anviz CX2 Lite Firmware, Anviz CX7 Firmware 🏢 Vendor: Anviz 📅 Updated: 2026-04-17 📝 Anviz CX2 Lite and CX7 are vulnerable to unauthenticated access that discloses debug configuration details (e.g., SSH/RTTY status), assisting attackers in reconnaissance against the device. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-23478 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-23492 📊 Score: 9.8/10 (CVSS v3.1) 📦 Product: Anviz CX7 Firmware, Anviz CX2 Lite Firmware 🏢 Vendor: Anviz 📅 Updated: 2026-04-17 📝 Anviz CX2 Lite and CX7 are vulnerable to unauthenticated firmware uploads. This causes crafted archives to be accepted, enabling attackers to plant and execute code and obtain a reverse shell. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-23492 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-23494 📊 Score: 8.8/10 (CVSS v3.1) 📦 Product: Anviz CX2 Lite Firmware, Anviz CX7 Firmware 🏢 Vendor: Anviz 📅 Updated: 2026-04-17 📝 Anviz CX2 Lite and CX7 are vulnerable to unverified update packages that can be uploaded. The device unpacks and executes a script resulting in unauthenticated remote code execution. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-23494 #cybersecurity #infosec #euvd #cve #vulnerability