Vulnerability · Published Apr 17, 2026 · Assigned by icscert
CVE-2026-35061Anviz Products Missing Authorization
Medium 5.3
In plain English
A medium-severity missing authorization in Anviz CX7 Firmware from Anviz. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 23% of all known vulnerabilities).
Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.3%top 77.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Anviz CX7 Firmware is vulnerable to the most recently captured test photo that can be retrieved without authentication, revealing sensitive operational imagery.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Anviz | Anviz CX7 Firmware | All versions |
Weakness: CWE-862 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N