Skip to content
CVE PROGRAM SOURCE RECORD4.9 Medium

CVE-2026-31927

Anviz CX7 Firmware Relative Path Traversal

Description

Anviz CX7 Firmware is vulnerable to an authenticated CSV upload which allows path traversal to overwrite arbitrary files (e.g., /etc/shadow), enabling unauthorized SSH access when combined with debug‑setting changes.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Anviz Anviz CX7 Firmware

Default version status: unaffected

  • All versionsaffected

References