Remote Code Execution Vulnerability in Anviz CX2 Lite and CX7 Devices

CVE-2026-40066

What is CVE-2026-40066?

Anviz CX2 Lite and CX7 devices are susceptible to a significant security flaw that allows an attacker to upload unverified update packages. Once uploaded, the device can unpack and execute a script, which may lead to unauthorized access and remote code execution. This vulnerability highlights the importance of secure update mechanisms to safeguard against potential exploitation and compromise of device integrity.

References