CVE-2026-35061
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
Anviz CX7 Firmware is vulnerable to unauthenticated retrieval of the most recently captured test photo, revealing sensitive operational imagery.
Risk Assessment
An unauthenticated attacker can access photos captured by the device, potentially exposing information about individuals and operations. This is a confidentiality breach.
Recommendation
Update Anviz CX7 firmware to a version containing the fix and restrict network access to the device to trusted networks.
Other vulnerabilities in Anviz CX7 Firmware
See all- CVE-2026-33093Medium
Anviz CX7 Firmware is vulnerable to an unauthenticated POST request to the device that captures a photo with the front-facing camera, exposing visual information about the deployment environment.
- CVE-2026-32324High
Anviz CX7 Firmware is vulnerable due to the embedding of reusable certificates and keys, enabling decryption of MQTT traffic and potential interaction with device messaging channels at scale.
- CVE-2026-31927Medium
A vulnerability in Anviz CX7 firmware allows an authenticated attacker to upload a CSV file with path traversal, overwriting arbitrary files such as /etc/shadow. Combined with debug-setting changes, this can lead to unauthorized SSH access.
Original NVD description (English source)
Anviz CX7 Firmware is vulnerable to the most recently captured test photo that can be retrieved without authentication, revealing sensitive operational imagery.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS