Security Advisory
CVE-2026-40066
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Anviz CX2 Lite and CX7 are vulnerable to unverified update packages that can be uploaded. The device unpacks and executes a script resulting in unauthenticated remote code execution.