Unauthenticated Firmware Vulnerability in Anviz CX2 Lite and CX7 Devices

CVE-2026-35546

What is CVE-2026-35546?

The Anviz CX2 Lite and CX7 devices are susceptible to a significant vulnerability that allows unauthenticated users to upload malicious firmware. This weakness can be exploited by attackers to upload specially crafted archives, which could lead to unauthorized code execution. By leveraging this vulnerability, attackers may gain the ability to plant and execute arbitrary code, potentially resulting in a reverse shell that compromises the integrity and security of the affected devices.

References