PatchTheCVECVE-2026-33569: Anviz CX2 Lite and CX7 administrative sessions occur over HTTP, enabling on‑path attackers to sniff credentia
CVE-2026-33569 is a medium-severity flaw (CVSS 6.5) affecting cx7 firmware, cx2 lite firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Anviz CX2 Lite and CX7 administrative sessions occur over HTTP, enabling on‑path attackers to sniff credentials and session data, which can be used to compromise the device.
Why this priority
- No elevated risk signals yet
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 6.5 (Medium) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | Required |
| EPSS exploit chance | 0.2% (top 92%) |
| CISA exploited list | No |
| Weakness | CWE-319 |
| Published | 2026-04-17 |
| Last modified | 2026-10-26 |
Last updated 2026-10-26 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2026-33569?
cx7 firmware: mitigate or apply the listed mitigation; cx2 lite firmware: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2026-33569 being exploited?
CVE-2026-33569 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2026-33569 affect?
CVE-2026-33569 affects cx7 firmware, cx2 lite firmware. Severity is medium (CVSS 6.5). Anviz CX2 Lite and CX7 administrative sessions occur over HTTP, enabling on‑path attackers to sniff credentials and session data, which can be used to compromise the device.
How urgent is CVE-2026-33569?
Priority 25/100. No elevated risk signals yet.
Related CVEs
- CVE-2026-32324 HIGH 7.7 MITIGATE Anviz CX7 Firmware is vulnerable because the application embeds reusable certificate/key material, enabling
- CVE-2026-35546 CRITICAL 9.8 MITIGATE MITIGATE Anviz CX2 Lite and CX7 are vulnerable to unauthenticated firmware uploads
- CVE-2026-40066 HIGH 8.8 MITIGATE MITIGATE Anviz CX2 Lite and CX7 are vulnerable to unverified update packages that can be uploaded
- CVE-2026-40461 HIGH 7.5 MITIGATE MITIGATE Anviz CX2 Lite and CX7 are vulnerable to unauthenticated POST requests that modify debug settings (e.g., enab
- CVE-2026-35061 MEDIUM 5.3 MITIGATE Anviz CX7 Firmware is vulnerable to the most recently captured test photo that can be retrieved without authe