Authenticated Command Injection Vulnerability in Anviz CX2 Lite by Anviz

CVE-2026-35682

What is CVE-2026-35682?

The Anviz CX2 Lite is susceptible to an authenticated command injection vulnerability through a filename parameter. This loophole allows for arbitrary command execution, granting potential attackers root-level access to the device. This exposure can lead to unauthorized control over the device, emphasizing the need for immediate security measures to mitigate risks.

References