CVE-2026-32648

MediumCVSS 5.3

Published: 17/04/2026(UTC)Updated: 26/10/2026(UTC)Translated: 27/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

16th percentile - higher than 16% of all known CVEs

Summary

Anviz CX2 Lite and CX7 are vulnerable to unauthenticated access that discloses debug configuration details (e.g., SSH/RTTY status), assisting attackers in reconnaissance against the device.

Risk Assessment

An attacker could obtain device configuration information, facilitating further attacks and potentially leading to unauthorized access. Disclosure of debug service status could be used for escalation.

Recommendation

Restrict network access to Anviz CX2 Lite and CX7 devices and disable unnecessary debug services. Also monitor for unauthorized access attempts.

Other vulnerabilities in Anviz CX2 Lite and CX7

CVE-2026-40066High
Anviz CX2 Lite and CX7 devices are vulnerable to unverified update package uploads. The device unpacks and executes a script, leading to unauthenticated remote code execution.

Original NVD description (English source)

Anviz CX2 Lite and CX7 are vulnerable to unauthenticated access that discloses debug configuration details (e.g., SSH/RTTY status), assisting attackers in reconnaissance against the device.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS