Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-32648

Anviz Products Missing Authorization

Description

Anviz CX2 Lite and CX7 are vulnerable to unauthenticated access that discloses debug configuration details (e.g., SSH/RTTY status), assisting attackers in reconnaissance against the device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Anviz Anviz CX7 Firmware

Default version status: unaffected

  • All versionsaffected

Anviz Anviz CX2 Lite Firmware

Default version status: unaffected

  • All versionsaffected

References