Back Thehackerwire

CVE-2026-32324 - High Vulnerability

Thehackerwire • April 18, 2026

Anviz CX7 Firmware is vulnerable because the application embeds reusable certificate/key material, enabling decryption of MQTT traffic and potential interaction with device messaging channels at scale.

Modify values to recalculate the CVSS score in real-time

Stay informed the most severe security threats discovered this week

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Buffer Overflow Vulnerability in Silex Devices (CVE-2026-32956) Silex Technology, Inc. has reported a critical heap-based buffer overflow vulnerability in its SD-330AC devices and AMC Manager software, identified as CVE-2026-32956. This vulnerability allows unauthenticated remote attackers to execute arbitrary code without user interaction, potentially leading to complete device compromise. The CVSS v3.1 base score for this vulnerability is 9.8, indicating high impacts on confidentiality, integrity, and availability. A patch has been released, and users are urged to update their systems immediately. As an interim measure, restricting network access and disabling redirect URL processing features is recommended until patches are applied. Currently, there is no evidence of exploitation in the wild or public proof-of-concept available. This vulnerability poses a significant risk to organizations using affected devices. The urgency of the situation is emphasized by the critical severity rating assigned to the vulnerability. 2 sources 80

Extracted Entities

CVE-2026-32324 - High Vulnerability

The full story

Extracted Entities

CVEs (1)

CWE Weaknesses (2)

Platforms (1)