Firmware Vulnerability in Anviz CX7 by Anviz
CVE-2026-32324

7.7HIGH

Key Information:

Vendor

Anviz

Status
Anviz Cx7 Firmware
Vendor
CVE Published:
17 April 2026

What is CVE-2026-32324?

The Anviz CX7 Firmware exhibits a security flaw where it incorporates reusable certificate and key material, leading to the exposure of MQTT traffic. This vulnerability allows potential attackers to decrypt sensitive communications and engage with device messaging channels, posing significant risks to data integrity and confidentiality.

Affected Version(s)

Anviz CX7 Firmware All versions

References

https://www.anviz.com/contact-us.html
https://www.cisa.gov/news-events/ics-advisories/icsa-26-1...
https://github.com/cisagov/CSAF/blob/develop/csaf_files/O...

CVSS V3.1

Score:
7.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.