CVE-2026-35546: Anviz CX2 Lite Firmware

Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Anviz CX2 Lite and CX7 are vulnerable to unauthenticated firmware uploads. This causes crafted archives to be accepted, enabling attackers to plant and execute code and obtain a reverse shell.

Affected products

• Anviz CX2 Lite Firmware: affected versions not specified
• Anviz CX7 Firmware: affected versions not specified

Published 2026-04-17. Last modified 2026-06-17.