{"schema_version":1,"title":"Anviz vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 12 vulnerabilities in Anviz: 0 in the last 7 days and 0 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-40461, was published on 17 April 2026. 4 technologies have a page of their own.","url":"https://junglewise.ai/threats/vendors/anviz","json_url":"https://junglewise.ai/threats/vendors/anviz.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/anviz","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","thin":true,"counts":{"high":6,"all_time":12,"critical":1,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":0,"last_365_days":12},"latest":[{"cve":"CVE-2026-40461","cvss":7.5,"epss":0.0029,"slug":"cve-2026-40461-anviz-cx2-lite-and-cx7-are-vulnerable-to-unauthenticated-post","title":"Anviz CX2 Lite and CX7 are vulnerable to unauthenticated POST requests that modify debug settings (e.g., enabling…","severity":"high","exploited":false,"published_at":"2026-04-17T20:16:36.217+00:00","url":"https://junglewise.ai/threats/cve-2026-40461-anviz-cx2-lite-and-cx7-are-vulnerable-to-unauthenticated-post"},{"cve":"CVE-2026-40434","cvss":8.1,"epss":0.0023,"slug":"cve-2026-40434-anviz-crosschex-standard-lacks-source-verification-in-the-client","title":"Anviz CrossChex Standard lacks source verification in the client/server channel, enabling TCP packet injection by an…","severity":"high","exploited":false,"published_at":"2026-04-17T20:16:36.083+00:00","url":"https://junglewise.ai/threats/cve-2026-40434-anviz-crosschex-standard-lacks-source-verification-in-the-client"},{"cve":"CVE-2026-40066","cvss":8.8,"epss":0.003,"slug":"cve-2026-40066-anviz-cx2-lite-and-cx7-remote-code-execution-via-unverified","title":"Anviz CX2 Lite and CX7 remote code execution via unverified updates","severity":"high","exploited":false,"published_at":"2026-04-17T20:16:35.637+00:00","url":"https://junglewise.ai/threats/cve-2026-40066-anviz-cx2-lite-and-cx7-remote-code-execution-via-unverified"},{"cve":"CVE-2026-35682","cvss":8.8,"epss":0.0179,"slug":"cve-2026-35682-anviz-cx2-lite-is-vulnerable-to-an-authenticated-command","title":"Anviz CX2 Lite is vulnerable to an authenticated command injection via a filename parameter that enables arbitrary command execution (e.g.","severity":"high","exploited":false,"published_at":"2026-04-17T20:16:35.51+00:00","url":"https://junglewise.ai/threats/cve-2026-35682-anviz-cx2-lite-is-vulnerable-to-an-authenticated-command"},{"cve":"CVE-2026-35546","cvss":9.8,"epss":0.0059,"slug":"cve-2026-35546-anviz-cx2-lite-and-cx7-are-vulnerable-to-unauthenticated-firmware","title":"Anviz CX2 Lite and CX7 are vulnerable to unauthenticated firmware uploads. This causes crafted archives to be…","severity":"critical","exploited":false,"published_at":"2026-04-17T20:16:35.38+00:00","url":"https://junglewise.ai/threats/cve-2026-35546-anviz-cx2-lite-and-cx7-are-vulnerable-to-unauthenticated-firmware"},{"cve":"CVE-2026-35061","cvss":5.3,"epss":0.003,"slug":"cve-2026-35061-anviz-cx7-firmware-is-vulnerable-to-the-most-recently-captured","title":"Anviz CX7 Firmware is vulnerable to the most recently captured test photo that can be retrieved without…","severity":"medium","exploited":false,"published_at":"2026-04-17T20:16:35.117+00:00","url":"https://junglewise.ai/threats/cve-2026-35061-anviz-cx7-firmware-is-vulnerable-to-the-most-recently-captured"},{"cve":"CVE-2026-33569","cvss":6.5,"epss":0.0019,"slug":"cve-2026-33569-anviz-cx2-lite-and-cx7-administrative-sessions-occur-over-http","title":"Anviz CX2 Lite and CX7 administrative sessions occur over HTTP, enabling on‑path attackers to sniff credentials and…","severity":"medium","exploited":false,"published_at":"2026-04-17T20:16:34.847+00:00","url":"https://junglewise.ai/threats/cve-2026-33569-anviz-cx2-lite-and-cx7-administrative-sessions-occur-over-http"},{"cve":"CVE-2026-33093","cvss":5.3,"epss":0.0025,"slug":"cve-2026-33093-anviz-cx7-firmware-is-vulnerable-to-an-unauthenticated-post-to","title":"Anviz CX7 Firmware is vulnerable to an unauthenticated POST to the device that captures a photo with the front facing…","severity":"medium","exploited":false,"published_at":"2026-04-17T20:16:34.493+00:00","url":"https://junglewise.ai/threats/cve-2026-33093-anviz-cx7-firmware-is-vulnerable-to-an-unauthenticated-post-to"},{"cve":"CVE-2026-32650","cvss":7.5,"epss":0.0021,"slug":"cve-2026-32650-anviz-crosschex-standard-is-vulnerable-when-an-attacker","title":"Anviz CrossChex Standard is vulnerable when an attacker manipulates the TDS7 PreLogin to disable encryption, causing…","severity":"high","exploited":false,"published_at":"2026-04-17T20:16:34.36+00:00","url":"https://junglewise.ai/threats/cve-2026-32650-anviz-crosschex-standard-is-vulnerable-when-an-attacker"},{"cve":"CVE-2026-32648","cvss":5.3,"epss":0.0025,"slug":"cve-2026-32648-anviz-cx2-lite-and-cx7-are-vulnerable-to-unauthenticated-access","title":"Anviz CX2 Lite and CX7 are vulnerable to unauthenticated access that discloses debug configuration details (e.g…","severity":"medium","exploited":false,"published_at":"2026-04-17T20:16:34.22+00:00","url":"https://junglewise.ai/threats/cve-2026-32648-anviz-cx2-lite-and-cx7-are-vulnerable-to-unauthenticated-access"},{"cve":"CVE-2026-32324","cvss":7.7,"epss":0.0009,"slug":"cve-2026-32324-anviz-cx7-firmware-is-vulnerable-because-the-application-embeds","title":"Anviz CX7 Firmware is vulnerable because the application embeds reusable certificate/key material, enabling decryption…","severity":"high","exploited":false,"published_at":"2026-04-17T20:16:33.817+00:00","url":"https://junglewise.ai/threats/cve-2026-32324-anviz-cx7-firmware-is-vulnerable-because-the-application-embeds"},{"cve":"CVE-2026-31927","cvss":4.9,"epss":0.0035,"slug":"cve-2026-31927-anviz-cx7-firmware-path-traversal-via-csv-upload","title":"Anviz CX7 Firmware path traversal via CSV upload","severity":"medium","exploited":false,"published_at":"2026-04-17T20:16:33.37+00:00","url":"https://junglewise.ai/threats/cve-2026-31927-anviz-cx7-firmware-path-traversal-via-csv-upload"}],"vendor":{"hub":true,"name":"Anviz","slug":"anviz","homepage":"https://www.anviz.com/","description":"Anviz is a provider of converged intelligent security solutions, including biometrics, surveillance, and RFID technologies.","url":"https://junglewise.ai/threats/vendors/anviz"},"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-35546","cvss":9.8,"epss":0.0059,"slug":"cve-2026-35546-anviz-cx2-lite-and-cx7-are-vulnerable-to-unauthenticated-firmware","title":"Anviz CX2 Lite and CX7 are vulnerable to unauthenticated firmware uploads. This causes crafted archives to be…","severity":"critical","exploited":false,"published_at":"2026-04-17T20:16:35.38+00:00","url":"https://junglewise.ai/threats/cve-2026-35546-anviz-cx2-lite-and-cx7-are-vulnerable-to-unauthenticated-firmware"},{"cve":"CVE-2026-35682","cvss":8.8,"epss":0.0179,"slug":"cve-2026-35682-anviz-cx2-lite-is-vulnerable-to-an-authenticated-command","title":"Anviz CX2 Lite is vulnerable to an authenticated command injection via a filename parameter that enables arbitrary command execution (e.g.","severity":"high","exploited":false,"published_at":"2026-04-17T20:16:35.51+00:00","url":"https://junglewise.ai/threats/cve-2026-35682-anviz-cx2-lite-is-vulnerable-to-an-authenticated-command"},{"cve":"CVE-2026-40066","cvss":8.8,"epss":0.003,"slug":"cve-2026-40066-anviz-cx2-lite-and-cx7-remote-code-execution-via-unverified","title":"Anviz CX2 Lite and CX7 remote code execution via unverified updates","severity":"high","exploited":false,"published_at":"2026-04-17T20:16:35.637+00:00","url":"https://junglewise.ai/threats/cve-2026-40066-anviz-cx2-lite-and-cx7-remote-code-execution-via-unverified"},{"cve":"CVE-2026-40434","cvss":8.1,"epss":0.0023,"slug":"cve-2026-40434-anviz-crosschex-standard-lacks-source-verification-in-the-client","title":"Anviz CrossChex Standard lacks source verification in the client/server channel, enabling TCP packet injection by an…","severity":"high","exploited":false,"published_at":"2026-04-17T20:16:36.083+00:00","url":"https://junglewise.ai/threats/cve-2026-40434-anviz-crosschex-standard-lacks-source-verification-in-the-client"},{"cve":"CVE-2026-32324","cvss":7.7,"epss":0.0009,"slug":"cve-2026-32324-anviz-cx7-firmware-is-vulnerable-because-the-application-embeds","title":"Anviz CX7 Firmware is vulnerable because the application embeds reusable certificate/key material, enabling decryption…","severity":"high","exploited":false,"published_at":"2026-04-17T20:16:33.817+00:00","url":"https://junglewise.ai/threats/cve-2026-32324-anviz-cx7-firmware-is-vulnerable-because-the-application-embeds"},{"cve":"CVE-2026-40461","cvss":7.5,"epss":0.0029,"slug":"cve-2026-40461-anviz-cx2-lite-and-cx7-are-vulnerable-to-unauthenticated-post","title":"Anviz CX2 Lite and CX7 are vulnerable to unauthenticated POST requests that modify debug settings (e.g., enabling…","severity":"high","exploited":false,"published_at":"2026-04-17T20:16:36.217+00:00","url":"https://junglewise.ai/threats/cve-2026-40461-anviz-cx2-lite-and-cx7-are-vulnerable-to-unauthenticated-post"},{"cve":"CVE-2026-32650","cvss":7.5,"epss":0.0021,"slug":"cve-2026-32650-anviz-crosschex-standard-is-vulnerable-when-an-attacker","title":"Anviz CrossChex Standard is vulnerable when an attacker manipulates the TDS7 PreLogin to disable encryption, causing…","severity":"high","exploited":false,"published_at":"2026-04-17T20:16:34.36+00:00","url":"https://junglewise.ai/threats/cve-2026-32650-anviz-crosschex-standard-is-vulnerable-when-an-attacker"},{"cve":"CVE-2026-33569","cvss":6.5,"epss":0.0019,"slug":"cve-2026-33569-anviz-cx2-lite-and-cx7-administrative-sessions-occur-over-http","title":"Anviz CX2 Lite and CX7 administrative sessions occur over HTTP, enabling on‑path attackers to sniff credentials and…","severity":"medium","exploited":false,"published_at":"2026-04-17T20:16:34.847+00:00","url":"https://junglewise.ai/threats/cve-2026-33569-anviz-cx2-lite-and-cx7-administrative-sessions-occur-over-http"},{"cve":"CVE-2026-35061","cvss":5.3,"epss":0.003,"slug":"cve-2026-35061-anviz-cx7-firmware-is-vulnerable-to-the-most-recently-captured","title":"Anviz CX7 Firmware is vulnerable to the most recently captured test photo that can be retrieved without…","severity":"medium","exploited":false,"published_at":"2026-04-17T20:16:35.117+00:00","url":"https://junglewise.ai/threats/cve-2026-35061-anviz-cx7-firmware-is-vulnerable-to-the-most-recently-captured"},{"cve":"CVE-2026-33093","cvss":5.3,"epss":0.0025,"slug":"cve-2026-33093-anviz-cx7-firmware-is-vulnerable-to-an-unauthenticated-post-to","title":"Anviz CX7 Firmware is vulnerable to an unauthenticated POST to the device that captures a photo with the front facing…","severity":"medium","exploited":false,"published_at":"2026-04-17T20:16:34.493+00:00","url":"https://junglewise.ai/threats/cve-2026-33093-anviz-cx7-firmware-is-vulnerable-to-an-unauthenticated-post-to"}],"generated_at":"2026-11-09T03:07:00.176479+00:00","technologies":[{"name":"Anviz Cx7","slug":"cx7","vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/cx7"},{"name":"Anviz CX7 Firmware","slug":"cx7-firmware","vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/cx7-firmware"},{"name":"Anviz Cx2 Lite","slug":"cx2-lite","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/cx2-lite"},{"name":"Anviz CX2 Lite Firmware","slug":"cx2-lite-firmware","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/cx2-lite-firmware"}]}