CVE-2026-35061CWE-862

Anviz Products Missing Authorization

Medium · published April 17, 2026

CVSS v3.1
5.3
EPSS
1%
Percentile
43.0
In the wild
Unconfirmed
What it is

Anviz CX7 Firmware is vulnerable to the most recently captured test photo that can be

retrieved without authentication, revealing sensitive operational

imagery.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00515 · 43.0th percentile
Weakness
CWE-862 · Missing Authorization
Published
2026-04-17T19:19Z
EPSS history
Timeline
  • 17 APR 19:19Z
    Anviz Products Missing Authorization
    cvelistv5