VulnSocial

CVE-2026-32648Disclosure(anviz / cx2_lite)

LOWCVSS 5.3 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Anviz CX2 Lite and CX7 are vulnerable to unauthenticated access that discloses debug configuration details (e.g., SSH/RTTY status), assisting attackers in reconnaissance against the device.

anviz CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-862

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • cx2_lite
  • cx2_lite_firmware
  • cx7
  • cx7_firmware

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-04-18); latest day: 1
  • 3 total mentions across 2 days

Affected systems

Vendors
anviz
Products
cx2_litecx2_lite_firmwarecx7cx7_firmware

1 version affected across 4 products

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-04-18: 2Mentions · 2026-04-19: 1Technical Details · 2026-04-18: 204-1804-19
Signal classification2 categories
Disclosure
266.7%
General
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-04-182
Disclosure1General1
2026-04-191
Disclosure1
Full discourse3 posts
  • Security Arsenal, LLC@SecurityAr58409
    Disclosure

    🔒 #CyberSecurity Anviz CrossChex and Firmware Vulnerabilities (CVE-2026-32648) — Defense and Har… "CISA warns critical flaws in Anviz CrossChex and…" 🔗 https://securityarsenal.com/blog/anviz-crosschex-and-firmware-vulnerabilities-cve-2026-32648-defense-and-hardening-guide #CyberSecurity #ThreatIntel #healthcarecybersecurity #hipaacompliance #healthcareransomware

    Post summary

    The tweet announces the discovery of CVE-2026-32648 in Anviz CrossChex firmware and links to a post that likely contains details, but it provides no technical exploitation information or patch guidance.

    0000047
    11 followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-32648 Anviz CX2 Lite and CX7 are vulnerable to unauthenticated access that discloses debug configuration details (e.g., SSH/RTTY status), assisting attackers in reconnais… https://www.cve.org/CVERecord?id=CVE-2026-32648 ----- Traducción: CVE-2026-32648 Anv… http://infoflow.cloud`

    Post summary

    The post documents the discovery of CVE‑2026‑32648, indicating unauthenticated access on specific Anviz devices that exposes debug configuration information, but no mitigation or exploit details are given.

    0000040
    72 followersView on X
  • CVE@CVEnew
    General

    CVE-2026-32648 Anviz CX2 Lite and CX7 are vulnerable to unauthenticated access that discloses debug configuration details (e.g., SSH/RTTY status), assisting attackers in reconnais… https://www.cve.org/CVERecord?id=CVE-2026-32648

    Post summary

    The post notes that Anviz CX2 Lite and CX7 allow unauthenticated disclosure of debug settings, but offers no PoC, exploit, or remediation details.

    000001.2K
    57.2K followersView on X
CPE platform detail4 entries

4 of 4 entries

PartVendorProductVersionTarget SWTarget HW
HWanvizcx2_lite---
OSanvizcx2_lite_firmware---
HWanvizcx7---
OSanvizcx7_firmware---

Explore more

Back to dashboardanviz CVEscx2_lite vulnerabilities