cx2_lite_firmware vulnerabilities

CVEs whose affected-version data names the cx2_lite_firmware package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-40066High· 8.8

5mo ago

Anviz CX2 Lite and CX7 are vulnerable to unverified update packages that can be uploaded

Anviz CX2 Lite and CX7 are vulnerable to unverified update packages that can be uploaded. The device unpacks and executes a script resulting in unauthenticated remote code execution.

▾ Twilightanviz · cx7_firmwareEPSS 0.41%via NVD