CVE-2026-40461
EUVD-2026-2349817.04.2026, 20:16
Anviz CX2 Lite and CX7 are vulnerable to unauthenticated POST requests that modify debug settings (e.g., enabling SSH), allowing unauthorized state changes that can facilitate later compromise.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| anviz | cx7_firmware | - |
| anviz | cx2_lite_firmware | - |
𝑥
= Vulnerable software versions
Common Weakness Enumeration