Unauthorized Modification in Anviz CX2 Lite and CX7 Settings

CVE-2026-40461

What is CVE-2026-40461?

The Anviz CX2 Lite and CX7 devices exhibit a security flaw that allows unauthenticated users to send POST requests capable of altering critical debug settings. This vulnerability can enable unauthorized activation of SSH and potentially lead to further security breaches. Proper safeguards and access controls should be established to mitigate the risks associated with these unauthorized state changes.

References