Unauthenticated Access Vulnerability in Anviz CX2 Lite and CX7

CVE-2026-32648

What is CVE-2026-32648?

The Anviz CX2 Lite and CX7 devices have a vulnerability that permits unauthenticated access, revealing sensitive debug configuration details such as SSH and RTTY statuses. This information can be exploited by attackers to conduct reconnaissance for future attacks, posing a significant risk to the security integrity of the device and its environment.

References