Fanvil

    Dashboard / Vendors

    Products: 4
    Vulnerabilities: 14
    Known Exploited: 0
    6
    Critical Level Threats
    4
    High Level Threats
    4
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2025-70516

    WebSocket Authentication Bypass in Fanvil X7A Firmware 2.6.0.1182

    Last Modified: Oct 09, 2026
    Published: Oct 07, 2026

    CVE-2025-70517

    The request handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce any cross-origin resource protection for any state-changing request performed against the applications. Due to the lack of protection, cross-origin boundary can be completely bypassed, allowing for Cross-Site Request Forgery Attacks against any endpoint.

    Last Modified: Oct 09, 2026
    Published: Oct 07, 2026

    CVE-2025-70521

    Unauthenticated Remote Command Execution via Web Management Portal in Fanvil x7a Firmware 2.6.0.1182

    Last Modified: Oct 09, 2026
    Published: Oct 07, 2026

    CVE-2025-70519

    The device log component of Fanvil x7a firmware version 2.6.0.1182 does not properly sanitize or encode reflected user supplied data. The lack of sanitization allows for the injection of HTML which can be used to execute malicious JavaScript code on any target browser which renders the device log component.

    Last Modified: Oct 09, 2026
    Published: Oct 07, 2026

    CVE-2025-70518

    Unauthenticated Command Injection in Fanvil x7a Diagnostic Ping Tool

    Last Modified: Oct 09, 2026
    Published: Oct 07, 2026
    Items Per Page
    Fanvil Vulnerabilities & Security CVEs | CVE-DB