VULNERABILITY INTELLIGENCE

CVE-2026-33569

CVSS score6.5 MEDIUM

EPSS probability0.19%

CISA KEVNot currently listed

Published2026-04-17

Last modified2026-10-26

Description

Anviz CX2 Lite and CX7 administrative sessions occur over HTTP, enabling on‑path attackers to sniff credentials and session data, which can be used to compromise the device.