Credential Exposure in Anviz CX2 Lite and CX7 Administrative Sessions

CVE-2026-33569

What is CVE-2026-33569?

The Anviz CX2 Lite and CX7 devices use unsecured HTTP for administrative session communication. This vulnerability allows on-path attackers to intercept and capture credentials as well as session data. Such exposure potentially permits unauthorized access and manipulation of these devices, posing significant risks to the security and integrity of the affected systems.

References