CVE-2026-31927
MediumCVSS 4.9Exploitation Probability (EPSS)
Low risk29th percentile - higher than 29% of all known CVEs
Summary
A vulnerability in Anviz CX7 firmware allows an authenticated attacker to upload a CSV file with path traversal, overwriting arbitrary files such as /etc/shadow. Combined with debug-setting changes, this can lead to unauthorized SSH access.
Risk Assessment
The risk involves potential full device compromise by an authenticated attacker, enabling further network attacks and unauthorized system access.
Recommendation
Immediately update the Anviz CX7 firmware to the latest version and restrict administrative panel access to trusted IP addresses only.
Other vulnerabilities in Anviz CX7 Firmware
See all- CVE-2026-35061Medium
Anviz CX7 Firmware is vulnerable to unauthenticated retrieval of the most recently captured test photo, revealing sensitive operational imagery.
- CVE-2026-33093Medium
Anviz CX7 Firmware is vulnerable to an unauthenticated POST request to the device that captures a photo with the front-facing camera, exposing visual information about the deployment environment.
- CVE-2026-32324High
Anviz CX7 Firmware is vulnerable due to the embedding of reusable certificates and keys, enabling decryption of MQTT traffic and potential interaction with device messaging channels at scale.
Original NVD description (English source)
Anviz CX7 Firmware is vulnerable to an authenticated CSV upload which allows path traversal to overwrite arbitrary files (e.g., /etc/shadow), enabling unauthorized SSH access when combined with debug‑setting changes.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS