CVE-2026-35682
Anviz CX2 Lite Command Injection
CVSS Score
8.8
EPSS Score
0.0%
EPSS Percentile
0th
Anviz CX2 Lite is vulnerable to an authenticated command injection via a filename parameter that enables arbitrary command execution (e.g., starting telnetd), resulting in root‑level access.
| CWE | CWE-77 |
| Vendor | anviz |
| Product | anviz cx2 lite firmware |
| Published | Apr 17, 2026 |
| Last Updated | Apr 17, 2026 |
Stay Ahead of the Next One
Get instant alerts for anviz anviz cx2 lite firmware
Be the first to know when new high vulnerabilities affecting anviz anviz cx2 lite firmware are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
Anviz / Anviz CX2 Lite Firmware
All versions