Vulnerability in Anviz CX7 Firmware Exposes Deployment Environment through Unauthenticated Access

CVE-2026-33093

What is CVE-2026-33093?

The Anviz CX7 Firmware is susceptible to an unauthenticated POST request that enables unauthorized users to capture images via the device's front-facing camera. This security flaw exposes sensitive visual information about the deployment environment, potentially compromising user privacy and security. Organizations using this firmware should implement immediate security measures to protect against unauthorized access and mitigate risks associated with this vulnerability. Regular firmware updates and security audits are recommended to safeguard against such risks.

References