Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-35682

Anviz CX2 Lite Command Injection

Description

Anviz CX2 Lite is vulnerable to an authenticated command injection via a filename parameter that enables arbitrary command execution (e.g., starting telnetd), resulting in root‑level access.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Anviz Anviz CX2 Lite Firmware

Default version status: unaffected

  • All versionsaffected

References