CVE-2026-35061 is a vulnerability in Anviz CX7 Firmware where the most recently captured test photo can be accessed without authentication, violating proper authorization controls (CWE-862). This allows unauthorized parties to retrieve sensitive operational images from the device. The vulnerability affects all versions of the firmware and has a CVSS 3.1 score of 5.3 (medium severity), with network attack vector, low attack complexity, no privileges required, and no user interaction needed. No official remediation or patch has been published by the vendor as of the current information.

The vulnerability allows unauthorized remote access to sensitive imagery captured by the Anviz CX7 device without requiring authentication. This could lead to information disclosure impacting confidentiality. There is no indication of impact on integrity or availability. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict network access to the device to trusted users only and monitor for unauthorized access attempts. Avoid exposing the device to untrusted networks. Follow vendor communications for updates on patches or official mitigations.