CVE-2026-32324

High

Published: 17/04/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Anviz CX7 Firmware is vulnerable due to the embedding of reusable certificates and keys, enabling decryption of MQTT traffic and potential interaction with device messaging channels at scale.

Risk Assessment

The organization may be exposed to unauthorized access to device communications, potentially leading to serious security breaches.

Recommendation

It is recommended to update the firmware to the latest version and remove embedded certificates and keys to minimize risk.

Other vulnerabilities in Anviz CX7 Firmware

CVE-2026-31927Medium
A vulnerability in Anviz CX7 firmware allows an authenticated attacker to upload a CSV file with path traversal, overwriting arbitrary files such as /etc/shadow. Combined with debug-setting changes, this can lead to unauthorized SSH access.

Original NVD description (English source)

Anviz CX7 Firmware is vulnerable because the application embeds reusable certificate/key material, enabling decryption of MQTT traffic and potential interaction with device messaging channels at scale.