ZeroDay Findings
Sign inSign up

Findings

CVE-2026-35682

Anviz CX2 Lite is vulnerable to an authenticated command injection via a filename parameter that enables arbitrary command execution (e.g., starting telnetd), resultin…

Published Apr 17, 2026 · updated Jun 17, 2026 · anviz cx2 lite firmware

Anviz CX2 Lite is vulnerable to an authenticated command injection via a filename parameter that enables arbitrary command execution (e.g., starting telnetd), resulting in root‑level access.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 17, 2026 · NIST NVD

    Detected

    Anviz CX2 Lite is vulnerable to an authenticated command injection via a filename parameter that enables arbitrary command execution (e.g., starting telnetd), resulting in root‑level access.

  2. Jun 17, 2026 · NIST NVD

    Updated

    Anviz CX2 Lite is vulnerable to an authenticated command injection via a filename parameter that enables arbitrary command execution (e.g., starting telnetd), resulting in root‑level access.

Affected

  • cpe anviz/cx2 lite firmwareversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-35682

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-35682

    Anviz CX2 Lite is vulnerable to an authenticated command injection via a filename parameter that enables arbitrary command execution (e.g., starting telnetd), resulting in root‑level access.

    nvd.nist.gov

References